{"items":[{"id":"CVE-2025-1723","published":"2025-03-03T07:40:10.789Z","updated":"2025-03-03T14:24:12.072Z","title":"Account takeover","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.01475,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9097","published":"2025-02-05T12:40:15.257Z","updated":"2025-02-12T20:51:30.048Z","title":"IDOR","severity":"LOW","score":3.5,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.00705,"kevAdded":null,"exploit":false},{"id":"CVE-2024-41140","published":"2025-01-29T11:14:50.910Z","updated":"2025-02-12T19:51:14.429Z","title":"Improper Authorization","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.01049,"kevAdded":null,"exploit":false},{"id":"CVE-2024-52323","published":"2024-11-27T09:54:07.999Z","updated":"2025-08-27T21:43:04.930Z","title":"Sensitive Data Exposure","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Analytics Plus","kev":false,"epss":0.01465,"kevAdded":null,"exploit":false},{"id":"CVE-2024-49574","published":"2024-11-18T07:55:13.332Z","updated":"2024-11-26T14:45:29.910Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03616,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10839","published":"2024-11-08T10:58:19.228Z","updated":"2024-11-08T14:18:57.843Z","title":"XML External Entity","severity":"HIGH","score":8.5,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.02385,"kevAdded":null,"exploit":false},{"id":"CVE-2024-24409","published":"2024-11-08T08:01:12.844Z","updated":"2024-11-08T14:20:25.641Z","title":"Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"ADManager Plus","kev":false,"epss":0.06196,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10203","published":"2024-11-07T09:20:07.450Z","updated":"2024-11-07T14:27:15.677Z","title":"Agent Arbitrary File Deletion","severity":"HIGH","score":7,"vendor":"ManageEngine","product":"EndPoint Central","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9459","published":"2024-11-05T05:44:57.368Z","updated":"2024-11-05T16:24:05.731Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.0445,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36485","published":"2024-11-04T11:13:02.838Z","updated":"2024-11-07T11:02:05.293Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03227,"kevAdded":null,"exploit":false},{"id":"CVE-2024-48878","published":"2024-11-04T10:56:26.641Z","updated":"2024-11-04T15:22:39.321Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADManager Plus","kev":false,"epss":0.03231,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5608","published":"2024-10-24T11:42:44.789Z","updated":"2024-10-24T13:55:28.297Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02524,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9100","published":"2024-10-03T14:17:02.797Z","updated":"2024-10-03T15:33:56.745Z","title":"Local File Inclusion","severity":"MEDIUM","score":6.5,"vendor":"ManageEngine","product":"Analytics Plus","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38868","published":"2024-08-30T17:44:38.932Z","updated":"2024-08-30T17:59:41.602Z","title":"Incorrect Authorization","severity":"HIGH","score":7.6,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.00795,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6204","published":"2024-08-30T17:10:07.783Z","updated":"2024-08-30T18:05:36.513Z","title":"SQL injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.01958,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5546","published":"2024-08-28T08:44:09.433Z","updated":"2024-08-28T13:27:52.940Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Password Manager Pro","kev":false,"epss":0.0304,"kevAdded":null,"exploit":false},{"id":"CVE-2024-41150","published":"2024-08-23T14:08:17.169Z","updated":"2024-08-23T14:38:15.256Z","title":"Stored XSS","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"ServiceDesk Plus","kev":false,"epss":0.01275,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38869","published":"2024-08-23T14:07:46.792Z","updated":"2024-08-30T18:47:26.580Z","title":"Incorrect Authorization","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.0107,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5586","published":"2024-08-23T13:54:53.458Z","updated":"2024-08-23T14:40:48.724Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05172,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5556","published":"2024-08-23T13:52:28.522Z","updated":"2024-08-23T14:41:47.195Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04505,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5490","published":"2024-08-23T13:44:08.468Z","updated":"2024-08-23T14:43:05.433Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04037,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36514","published":"2024-08-23T13:37:56.318Z","updated":"2024-08-23T14:44:02.846Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04037,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36515","published":"2024-08-23T13:37:02.810Z","updated":"2024-08-23T14:45:08.096Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04505,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36516","published":"2024-08-23T13:36:05.237Z","updated":"2024-08-23T15:20:14.680Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04413,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36517","published":"2024-08-23T13:34:01.453Z","updated":"2024-08-23T15:21:13.955Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05279,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5467","published":"2024-08-23T13:28:28.419Z","updated":"2024-08-23T15:22:32.247Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04517,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5466","published":"2024-08-23T13:23:22.144Z","updated":"2024-08-23T15:37:32.493Z","title":"Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"OpManager, Remote Monitoring and Management","kev":false,"epss":0.06911,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36034","published":"2024-08-12T07:23:17.212Z","updated":"2024-08-12T12:27:27.466Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.07373,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36035","published":"2024-08-12T07:19:54.491Z","updated":"2024-08-12T13:48:39.216Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.07373,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36518","published":"2024-08-12T07:13:49.843Z","updated":"2024-08-16T04:01:43.100Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03117,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5487","published":"2024-08-12T07:04:12.610Z","updated":"2024-08-16T14:02:11.147Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04741,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5527","published":"2024-08-12T05:31:09.050Z","updated":"2024-08-16T04:01:40.638Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04702,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5678","published":"2024-08-01T06:54:25.601Z","updated":"2024-08-02T15:40:34.779Z","title":"SQL Injection","severity":"MEDIUM","score":4.7,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.04991,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6748","published":"2024-07-29T16:20:16.449Z","updated":"2024-08-01T21:41:04.605Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.23784,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38872","published":"2024-07-26T17:30:23.932Z","updated":"2024-08-02T04:19:20.244Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.03052,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38871","published":"2024-07-26T17:29:42.911Z","updated":"2024-08-02T04:19:20.491Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.03116,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38870","published":"2024-07-17T16:48:58.815Z","updated":"2024-08-02T04:19:20.403Z","title":"Stored XSS","severity":"LOW","score":3.5,"vendor":"ManageEngine","product":"OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5471","published":"2024-07-17T10:56:53.675Z","updated":"2024-08-01T21:11:12.767Z","title":"Agent takeover","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"DDI Central","kev":false,"epss":0.0247,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27311","published":"2024-07-17T10:52:45.823Z","updated":"2024-08-02T00:28:00.298Z","title":"Arbitrary file writing","severity":"MEDIUM","score":5.5,"vendor":"ManageEngine","product":"DDI Central","kev":false,"epss":0.01459,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36038","published":"2024-06-24T11:45:11.075Z","updated":"2024-08-02T03:30:12.484Z","title":"Stored XSS","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.01432,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27313","published":"2024-05-29T11:01:21.278Z","updated":"2024-08-02T00:27:59.908Z","title":"XSS Vulnerability","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"PAM360","kev":false,"epss":0.01294,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36037","published":"2024-05-27T17:59:52.711Z","updated":"2024-10-25T18:58:51.787Z","title":"Insufficient Access Control Vulnerability","severity":"MEDIUM","score":5.5,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36036","published":"2024-05-27T17:58:16.113Z","updated":"2024-10-31T15:21:20.581Z","title":"Insufficient Access Control Vulnerability","severity":"MEDIUM","score":4.2,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27310","published":"2024-05-27T17:26:14.229Z","updated":"2024-10-07T19:44:05.359Z","title":"DOS Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.02274,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27314","published":"2024-05-27T07:03:13.441Z","updated":"2024-08-02T00:27:59.873Z","title":"Stored XSS Vulnerability","severity":"LOW","score":2.4,"vendor":"ManageEngine","product":"ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus","kev":false,"epss":0.01908,"kevAdded":null,"exploit":false},{"id":"CVE-2024-21791","published":"2024-05-22T18:05:23.307Z","updated":"2024-08-01T22:27:36.320Z","title":"SQL Injection in ADAudit Plus","severity":"MEDIUM","score":4.7,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02152,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49335","published":"2024-05-20T17:55:49.809Z","updated":"2024-08-02T21:53:44.995Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49334","published":"2024-05-20T17:55:14.220Z","updated":"2024-08-02T21:53:45.017Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49333","published":"2024-05-20T17:51:50.719Z","updated":"2024-08-02T21:53:45.406Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49332","published":"2024-05-20T17:45:36.459Z","updated":"2024-08-02T21:53:45.011Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49331","published":"2024-05-20T17:35:49.217Z","updated":"2024-08-02T21:53:44.930Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27312","published":"2024-05-20T12:38:26.180Z","updated":"2024-10-07T11:45:01.627Z","title":"Authorization vulnerability in PAM360","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"PAM360","kev":false,"epss":0.00897,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49330","published":"2024-05-20T12:19:59.734Z","updated":"2024-08-02T21:53:45.218Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02288,"kevAdded":null,"exploit":false},{"id":"CVE-2024-21775","published":"2024-02-16T14:35:11.451Z","updated":"2024-08-21T14:44:14.705Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.05013,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0269","published":"2024-02-02T13:05:35.762Z","updated":"2024-08-01T17:41:16.415Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05366,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0253","published":"2024-02-02T12:50:35.088Z","updated":"2024-08-01T17:41:16.062Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05012,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0252","published":"2024-01-11T07:57:12.987Z","updated":"2025-06-17T21:09:15.509Z","title":"Remote code execution","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.07814,"kevAdded":null,"exploit":false}]}