Known Vulnerabilities for Manageengine Admanager Plus by Zohocorp
Listed below are 10 of the newest known vulnerabilities associated with "Manageengine Admanager Plus" by "Zohocorp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-41904 json | Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs. | 5.4 - MEDIUM | 2023-09-27 | 2023-09-28 |
| CVE-2023-39912 json | Zoho ManageEngine ADManager Plus through 7202 allows admin users to download any file from the server machine via directory t... | 4.9 - MEDIUM | 2023-08-31 | 2024-01-01 |
| CVE-2023-38743 json | Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. | 7.2 - HIGH | 2023-09-11 | 2023-09-13 |
| CVE-2023-38332 json | Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive inf... | 6.5 - MEDIUM | 2023-08-04 | 2023-08-09 |
| CVE-2023-35786 json | Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files. | 4.9 - MEDIUM | 2023-07-05 | 2023-07-10 |
| CVE-2023-35785 json | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, A... | 8.1 - HIGH | 2023-08-28 | 2024-03-12 |
| CVE-2023-31492 json | Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauth... | 6.5 - MEDIUM | 2023-08-17 | 2023-08-23 |
| CVE-2023-29084 json | Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings. | 7.2 - HIGH | 2023-04-13 | 2023-06-26 |
| CVE-2022-47966 json | Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to us... | 9.8 - CRITICAL | 2023-01-18 | 2023-09-11 |
| CVE-2022-42904 json | Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings. | 7.2 - HIGH | 2022-11-18 | 2022-11-22 |