Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 631

Export CSV
CVE-2025-9227

Stored XSS

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Opmanager
CVE-2025-8324

SQL Injection

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Analytics Plus
CVE-2025-1724

Account Takeover

Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.

CVSS 3.1 · 7.4 High EPSS 1.3% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Analytics Plus
CVE-2024-9100

Local File Inclusion

Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Analytics Plus
CVE-2024-36038

Stored XSS

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option.

CVSS 3.1 · 6.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Opmanager Plus
CVE-2025-9428

SQL Injection

Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api.

CVSS 3.1 · 8.3 High EPSS 29.2% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Analytics Plus