Zohocorp - vulnerabilities (CVEs)

603 CVEs in 80 products, 6 in the last 30 days, newest from 2026-10-13.

Products

Manageengine Opmanager - 70 CVEs
Manageengine Applications Manager - 63 CVEs
Manageengine Adselfservice Plus - 56 CVEs
Manageengine Adaudit Plus - 53 CVEs
Manageengine Admanager Plus - 53 CVEs
Manageengine Servicedesk Plus - 50 CVEs
Manageengine Desktop Central - 48 CVEs
Manageengine Supportcenter Plus - 31 CVEs
Manageengine Netflow Analyzer - 30 CVEs
Manageengine Exchange Reporter Plus - 28 CVEs
Manageengine Assetexplorer - 26 CVEs
Manageengine Password Manager Pro - 26 CVEs
Manageengine Servicedesk Plus Msp - 26 CVEs
Manageengine Eventlog Analyzer - 20 CVEs
Manageengine Firewall Analyzer - 19 CVEs
Manageengine Pam360 - 18 CVEs
Manageengine Network Configuration Manager - 16 CVEs
Manageengine Endpoint Central - 14 CVEs
Manageengine Remote Access Plus - 14 CVEs
Manageengine Access Manager Plus - 12 CVEs
Manageengine Log360 - 11 CVEs
Manageengine Datasecurity Plus - 9 CVEs
Manageengine It360 - 9 CVEs
Manageengine Oputils - 9 CVEs
Manageengine Analytics Plus - 8 CVEs
Manageengine Opmanager Plus - 8 CVEs
Manageengine Opmanager Msp - 7 CVEs
Ddi Central - 5 CVEs
Manageengine Cloud Security Plus - 5 CVEs
Manageengine Key Manager Plus - 5 CVEs
Manageengine M365 Manager Plus - 5 CVEs
Manageengine Sharepoint Manager Plus - 5 CVEs
Manageengine Social It Plus - 5 CVEs
Servicedesk Plus - 5 CVEs
Manageengine Application Control Plus - 4 CVEs
Manageengine Device Control Plus - 4 CVEs
Manageengine Recoverymanager Plus - 4 CVEs
Webnms Framework - 4 CVEs
Endpoint Central - 3 CVEs
Manageengine Ad360 - 3 CVEs
Manageengine Browser Security Plus - 3 CVEs
Manageengine M365 Security Plus - 3 CVEs
Manageengine Mobile Device Manager Plus - 3 CVEs
Manageengine O365 Manager Plus - 3 CVEs
Manageengine Patch Connect Plus - 3 CVEs
Manageengine Patch Manager Plus - 3 CVEs
Manageengine Vulnerability Manager Plus - 3 CVEs
Analytics Plus - 2 CVEs
Firewall Analyzer - 2 CVEs
Manageengine Ddi Central - 2 CVEs
Manageengine Desktop Central Managed Service Providers - 2 CVEs
Manageengine Endpoint Dlp Plus - 2 CVEs
Manageengine Log360 Ueba - 2 CVEs
Manageengine Opmanager Rmm - 2 CVEs
Manageengine Opstor - 2 CVEs
Manageengine Os Deployer - 2 CVEs
Manageengine Remote Monitoring And Management Central - 2 CVEs
Zoho Crm Lead Magnet - 2 CVEs
Zoho Forms - 2 CVEs
Desktop Central - 1 CVEs
Log360 - 1 CVEs
Manageengine Appcreator - 1 CVEs
Manageengine Applications Control Plus - 1 CVEs
Manageengine Endpoint Central Msp - 1 CVEs
Manageengine Firewall - 1 CVEs
Manageengine Malware Protection Plus - 1 CVEs
Manageengine Recovermanager Plus - 1 CVEs
Manageengine Recovery Manager Plus - 1 CVEs
Manageengine Remote Monitoring And Management - 1 CVEs
Manageengine Secure Gateway Server - 1 CVEs
Manageengine Supportcentre Plus - 1 CVEs
Password Manager Pro - 1 CVEs
Site24x7 Mobile Network Poller - 1 CVEs
Webnms - 1 CVEs
Zoho Mail Wordpress Plugin - 1 CVEs
Application Control Plus - 0 CVEs
Applications Manager - 0 CVEs
Netflow Analyzer - 0 CVEs
Network Configuration Manager - 0 CVEs
Oputils - 0 CVEs

Newest CVEs of Zohocorp

CVE-2026-14308 - CVSS 4.9 (medium), 2026-10-13: Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService.
CVE-2026-12265 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL…
CVE-2026-12264 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote code…
CVE-2026-12267 - CVSS 7.2 (high), 2026-09-28: ManageEngine DDI Central versions below 6201 are vulnerable to Command injection in Windows DNS Query Resolution Policy name field leading to remote code…
CVE-2026-12268 - CVSS 8.8 (high), 2026-09-28: ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell command injection in Windows DNS SPF/TXT record push leading to remote code execution.
CVE-2026-12269 - CVSS 8.8 (high), 2026-09-28: Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived configuration injection vulnerability in the HA configuration workflow. This issue…
CVE-2026-92905 - CVSS 5.3 (medium), 2026-09-24: ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector…
CVE-2026-86678 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform…
CVE-2026-86677 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining…
CVE-2026-86679 - CVSS 7.1 (high), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to…
CVE-2026-86683 - CVSS 8.1 (high), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings.
CVE-2026-86681 - CVSS 7.6 (high), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to…
CVE-2026-86708 - CVSS 10 (critical), 2026-09-23: ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the…
CVE-2026-19599 - CVSS 9.9 (critical), 2026-09-23: ZohoCorp ManageEngine OpManager MSP versions 12.8.709 and below were vulnerable to a Remote Code Execution vulnerability in the Notification Profile module.
CVE-2026-75825 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine OpManager versions 12.8.710 and below with the Application Manager Plugin enabled were vulnerable to an Authentication Bypass…
CVE-2026-76978 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Command Injection vulnerability in the Diagnose…
CVE-2026-76979 - CVSS 7.7 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to an XML Injection vulnerability in the Rule Tracking…
CVE-2026-76980 - CVSS 7.4 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.709 and below were vulnerable to a Data Exposure vulnerability in the Firewall Analyzer…
CVE-2026-84787 - CVSS 8.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Privilege Escalation vulnerability that allowed an…
CVE-2026-84789 - CVSS 7.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an…
CVE-2026-84791 - CVSS 7.1 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an…
CVE-2026-15358 - CVSS 7.5 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability.
CVE-2026-14913 - CVSS 8.8 (high), 2026-09-23: ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.669 and below were vulnerable to an SQL Injection vulnerability in Rule Management Search…
CVE-2026-12370 - CVSS 7.6 (high), 2026-09-23: ZohoCorp ManageEngine OpManager, NetFlow Analyzer, and Network Configuration Manager versions 12.8.667 and below were vulnerable to a Server-Side Template…
CVE-2026-75791 - CVSS 8.6 (high), 2026-09-22: Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API.
CVE-2026-74849 - CVSS 9.8 (critical), 2026-09-22: Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to a remote code execution vulnerability in the GINA client.
CVE-2026-18912 - CVSS 7.7 (high), 2026-09-18: ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to…
CVE-2026-18911 - CVSS 7.5 (high), 2026-09-18: ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without…
CVE-2026-77697 - CVSS 6.3 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction
CVE-2026-85640 - CVSS 6.3 (medium), 2026-09-07: Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component