Known Vulnerabilities for ManageEngine Log360 by Zohocorp
Listed below are 9 of the newest known vulnerabilities associated with "ManageEngine Log360" by "Zohocorp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-3324 json | Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to i... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2023-35785 json | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, A... | 8.1 - HIGH | 2023-08-28 | 2024-03-12 |
| CVE-2021-40178 json | Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings. | 6.1 - MEDIUM | 2021-08-29 | 2021-09-01 |
| CVE-2021-40177 json | Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite. | 9.8 - CRITICAL | 2021-08-29 | 2021-09-01 |
| CVE-2021-40176 json | Zoho ManageEngine Log360 before Build 5225 allows stored XSS. | 6.1 - MEDIUM | 2021-08-29 | 2021-09-01 |
| CVE-2021-40175 json | Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution. | 9.8 - CRITICAL | 2021-08-29 | 2021-09-01 |
| CVE-2021-40174 json | Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings. | 8.8 - HIGH | 2021-08-29 | 2021-09-01 |
| CVE-2021-40172 json | Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings. | 8.8 - HIGH | 2021-08-29 | 2021-09-01 |
| CVE-2021-20136 json | ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration ov... | 9.8 - CRITICAL | 2021-11-01 | 2022-07-12 |
| CVE-2020-24786 json | An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228,... | 9.8 - CRITICAL | 2020-08-31 | 2023-11-07 |