Manageengine Datasecurity Plus (Zohocorp) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2026-09-18. Vendor: Zohocorp.

CVEs of Manageengine Datasecurity Plus

CVE-2026-18912 - CVSS 7.7 (high), 2026-09-18: ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to…
CVE-2026-18911 - CVSS 7.5 (high), 2026-09-18: ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without…
CVE-2026-2740 - CVSS 8.4 (high), 2026-05-21: Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to…
CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
CVE-2023-35785 - CVSS 8.1 (high), 2023-08-28: Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and…
CVE-2020-24786 - CVSS 9.8 (critical), 2020-08-31: An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build…
CVE-2020-11532 - CVSS 9.8 (critical), 2020-05-08: Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server. This allows an attacker to…
CVE-2020-11531 - CVSS 8.8 (high), 2020-05-08: The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a…
CVE-2019-17112 - CVSS 4.3 (medium), 2019-10-09: An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user ("Operator" access level) to access…