Manageengine Sharepoint Manager Plus (Zohocorp) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 167 known versions, newest CVE from 2024-11-08. Vendor: Zohocorp.

CVEs of Manageengine Sharepoint Manager Plus

• CVE-2024-10839 - CVSS 8.5 (high), 2024-11-08: Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.
• CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
• CVE-2023-35785 - CVSS 8.1 (high), 2023-08-28: Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and…
• CVE-2022-24306 - CVSS 9.8 (critical), 2022-03-02: Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
• CVE-2022-24305 - CVSS 9.8 (critical), 2022-03-02: Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.