Manageengine O365 Manager Plus

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-24786 CRITICAL Act Now

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java Zoho Microsoft Authentication Bypass Manageengine Adselfservice Plus +10

NVD

CVSS 3.1

9.8

EPSS

12.8%

CVE-2019-12133 HIGH This Week

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Zoho Manageengine Analytics Plus Manageengine Browser Security Plus Manageengine Desktop Central +15

NVD GitHub

CVSS 3.0

7.8

EPSS

1.8%

CVE-2020-24786

EPSS 13% CVSS 9.8

CRITICAL Act Now

Java Zoho Microsoft +12

NVD

CVE-2019-12133

EPSS 2% CVSS 7.8

HIGH This Week

Privilege Escalation Zoho Manageengine Analytics Plus +17

NVD GitHub