Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 631

Export CSV
CVE-2024-41150

Stored XSS

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.

CVSS 3.1 · 6.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Servicedesk Plus Manageengine Servicedesk Plus Msp Manageengine Supportcenter Plus
CVE-2024-36516

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.

CVSS 3.1 · 8.3 High EPSS 4.4% KEV · Not listed
Vendors
Manageengine Zohocorp
Products
Adaudit Plus Manageengine Adaudit Plus
CVE-2024-36515

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.

CVSS 3.1 · 8.3 High EPSS 4.5% KEV · Not listed
Vendors
Manageengine Zohocorp
Products
Adaudit Plus Manageengine Adaudit Plus
CVE-2024-5678

SQL Injection

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

CVSS 3.1 · 4.7 Medium EPSS 5.0% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Applications Manager