Manageengine Application Control Plus (Zohocorp) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 175 known versions, newest CVE from 2023-11-15. Vendor: Zohocorp.

CVEs of Manageengine Application Control Plus

• CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
• CVE-2022-47966 - CVSS 9.8 (critical), 2023-01-18: Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka…
• CVE-2020-15595 - CVSS 4.3 (medium), 2020-09-30: An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the…
• CVE-2020-15594 - CVSS 4.3 (medium), 2020-09-30: An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a…