CPE Details
Zoho Corp ManageEngine Applications 15.5 Build15510
15.5
2022-06-06
12h13 +00:00
12h13 +00:00
2022-07-06
13h01 +00:00
13h01 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:zohocorp:manageengine_applications_manager:15.5:build15510:*:*:*:*:*:*
Informations
Vendor
zohocorpProduct
manageengine_applications_managerVersion
15.5Update
build15510Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature. | 4.7 |
Medium |
||
| Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in. | 6.1 |
Medium |
||
| Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS. | 6.1 |
Medium |
||
| Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack. | 6.5 |
Medium |
||
| ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the 'working' folder through the 'Upload Files / Binaries' functionality. | 7.2 |
High |
