{"items":[{"id":"CVE-2026-119682","published":"2026-10-30T14:21:21.154Z","updated":"2026-11-06T16:25:08.642Z","title":"Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus","severity":"HIGH","score":7.9,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false},{"id":"CVE-2026-119680","published":"2026-10-30T14:14:24.193Z","updated":"2026-11-06T16:26:33.327Z","title":"Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature","severity":"HIGH","score":8.5,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.0024,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8309","published":"2025-08-20T16:53:29.010Z","updated":"2026-11-04T00:15:40.120Z","title":"User privilege escalation vulnerability","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Asset Explorer","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2025-27930","published":"2025-07-23T10:20:09.411Z","updated":"2026-02-26T17:50:17.158Z","title":"Stored XSS","severity":"MEDIUM","score":6.4,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2025-5966","published":"2025-06-26T12:22:10.367Z","updated":"2025-06-26T12:54:07.728Z","title":"Stored XSS","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.01318,"kevAdded":null,"exploit":false},{"id":"CVE-2025-5366","published":"2025-06-26T12:21:02.567Z","updated":"2025-06-26T12:54:40.737Z","title":"Stored XSS","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.01318,"kevAdded":null,"exploit":false},{"id":"CVE-2025-41444","published":"2025-06-09T11:14:58.186Z","updated":"2025-06-09T13:05:30.719Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.01715,"kevAdded":null,"exploit":false},{"id":"CVE-2025-36528","published":"2025-06-09T11:12:14.531Z","updated":"2025-06-09T13:05:48.597Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.01715,"kevAdded":null,"exploit":false},{"id":"CVE-2025-27709","published":"2025-06-09T11:04:38.114Z","updated":"2025-06-09T15:39:11.883Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.01715,"kevAdded":null,"exploit":false},{"id":"CVE-2025-41437","published":"2025-06-09T10:44:08.879Z","updated":"2025-06-09T16:22:33.279Z","title":"Reflected XSS","severity":"MEDIUM","score":4.3,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.00263,"kevAdded":null,"exploit":false},{"id":"CVE-2025-3835","published":"2025-06-09T10:29:18.379Z","updated":"2026-02-26T17:51:06.541Z","title":"Remote Code Execution","severity":"CRITICAL","score":9.6,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.02395,"kevAdded":null,"exploit":false},{"id":"CVE-2025-41407","published":"2025-05-23T10:29:58.652Z","updated":"2025-05-23T11:57:14.276Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.0153,"kevAdded":null,"exploit":false},{"id":"CVE-2025-36527","published":"2025-05-23T10:28:24.153Z","updated":"2025-05-23T12:05:28.836Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.41989,"kevAdded":null,"exploit":false},{"id":"CVE-2025-41403","published":"2025-05-22T10:39:59.813Z","updated":"2025-05-22T18:13:43.312Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.01821,"kevAdded":null,"exploit":false},{"id":"CVE-2025-3836","published":"2025-05-22T10:38:26.473Z","updated":"2025-05-22T18:21:44.623Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.06142,"kevAdded":null,"exploit":false},{"id":"CVE-2025-3444","published":"2025-05-22T10:31:48.562Z","updated":"2025-05-22T18:28:27.922Z","title":"Local File Inclusion","severity":"MEDIUM","score":6.5,"vendor":"ManageEngine","product":"ServiceDesk Plus MSP","kev":false,"epss":0.01645,"kevAdded":null,"exploit":false},{"id":"CVE-2025-3834","published":"2025-05-14T11:05:34.690Z","updated":"2025-05-14T13:28:48.403Z","title":"SQL Injection","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.01726,"kevAdded":null,"exploit":false},{"id":"CVE-2025-3833","published":"2025-05-14T11:00:27.309Z","updated":"2025-05-14T13:30:00.739Z","title":"SQL Injection","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.50525,"kevAdded":null,"exploit":false},{"id":"CVE-2024-50053","published":"2025-03-21T06:01:39.945Z","updated":"2025-05-05T13:24:19.125Z","title":"Stored XSS","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"ServiceDesk Plus","kev":false,"epss":0.01146,"kevAdded":null,"exploit":false},{"id":"CVE-2025-1723","published":"2025-03-03T07:40:10.789Z","updated":"2025-03-03T14:24:12.072Z","title":"Account takeover","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.01475,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9097","published":"2025-02-05T12:40:15.257Z","updated":"2025-02-12T20:51:30.048Z","title":"IDOR","severity":"LOW","score":3.5,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.00705,"kevAdded":null,"exploit":false},{"id":"CVE-2024-41140","published":"2025-01-29T11:14:50.910Z","updated":"2025-02-12T19:51:14.429Z","title":"Improper Authorization","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.01049,"kevAdded":null,"exploit":false},{"id":"CVE-2024-52323","published":"2024-11-27T09:54:07.999Z","updated":"2025-08-27T21:43:04.930Z","title":"Sensitive Data Exposure","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"Analytics Plus","kev":false,"epss":0.01465,"kevAdded":null,"exploit":false},{"id":"CVE-2024-49574","published":"2024-11-18T07:55:13.332Z","updated":"2024-11-26T14:45:29.910Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03616,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10839","published":"2024-11-08T10:58:19.228Z","updated":"2024-11-08T14:18:57.843Z","title":"XML External Entity","severity":"HIGH","score":8.5,"vendor":"ManageEngine","product":"SharePoint Manager Plus","kev":false,"epss":0.02385,"kevAdded":null,"exploit":false},{"id":"CVE-2024-24409","published":"2024-11-08T08:01:12.844Z","updated":"2024-11-08T14:20:25.641Z","title":"Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"ADManager Plus","kev":false,"epss":0.06196,"kevAdded":null,"exploit":false},{"id":"CVE-2024-10203","published":"2024-11-07T09:20:07.450Z","updated":"2024-11-07T14:27:15.677Z","title":"Agent Arbitrary File Deletion","severity":"HIGH","score":7,"vendor":"ManageEngine","product":"EndPoint Central","kev":false,"epss":0.00448,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9459","published":"2024-11-05T05:44:57.368Z","updated":"2024-11-05T16:24:05.731Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.0445,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36485","published":"2024-11-04T11:13:02.838Z","updated":"2024-11-07T11:02:05.293Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03227,"kevAdded":null,"exploit":false},{"id":"CVE-2024-48878","published":"2024-11-04T10:56:26.641Z","updated":"2024-11-04T15:22:39.321Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADManager Plus","kev":false,"epss":0.03231,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5608","published":"2024-10-24T11:42:44.789Z","updated":"2024-10-24T13:55:28.297Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02524,"kevAdded":null,"exploit":false},{"id":"CVE-2024-9100","published":"2024-10-03T14:17:02.797Z","updated":"2024-10-03T15:33:56.745Z","title":"Local File Inclusion","severity":"MEDIUM","score":6.5,"vendor":"ManageEngine","product":"Analytics Plus","kev":false,"epss":0.00484,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38868","published":"2024-08-30T17:44:38.932Z","updated":"2024-08-30T17:59:41.602Z","title":"Incorrect Authorization","severity":"HIGH","score":7.6,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.00795,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6204","published":"2024-08-30T17:10:07.783Z","updated":"2024-08-30T18:05:36.513Z","title":"SQL injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.01958,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5546","published":"2024-08-28T08:44:09.433Z","updated":"2024-08-28T13:27:52.940Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Password Manager Pro","kev":false,"epss":0.0304,"kevAdded":null,"exploit":false},{"id":"CVE-2024-41150","published":"2024-08-23T14:08:17.169Z","updated":"2024-08-23T14:38:15.256Z","title":"Stored XSS","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"ServiceDesk Plus","kev":false,"epss":0.01275,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38869","published":"2024-08-23T14:07:46.792Z","updated":"2024-08-30T18:47:26.580Z","title":"Incorrect Authorization","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Endpoint Central","kev":false,"epss":0.0107,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5586","published":"2024-08-23T13:54:53.458Z","updated":"2024-08-23T14:40:48.724Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05172,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5556","published":"2024-08-23T13:52:28.522Z","updated":"2024-08-23T14:41:47.195Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04505,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5490","published":"2024-08-23T13:44:08.468Z","updated":"2024-08-23T14:43:05.433Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04037,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36514","published":"2024-08-23T13:37:56.318Z","updated":"2024-08-23T14:44:02.846Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04037,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36515","published":"2024-08-23T13:37:02.810Z","updated":"2024-08-23T14:45:08.096Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04505,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36516","published":"2024-08-23T13:36:05.237Z","updated":"2024-08-23T15:20:14.680Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04413,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36517","published":"2024-08-23T13:34:01.453Z","updated":"2024-08-23T15:21:13.955Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05279,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5467","published":"2024-08-23T13:28:28.419Z","updated":"2024-08-23T15:22:32.247Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04517,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5466","published":"2024-08-23T13:23:22.144Z","updated":"2024-08-23T15:37:32.493Z","title":"Remote Code Execution","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"OpManager, Remote Monitoring and Management","kev":false,"epss":0.06911,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36034","published":"2024-08-12T07:23:17.212Z","updated":"2024-08-12T12:27:27.466Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.07373,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36035","published":"2024-08-12T07:19:54.491Z","updated":"2024-08-12T13:48:39.216Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.07373,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36518","published":"2024-08-12T07:13:49.843Z","updated":"2024-08-16T04:01:43.100Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03117,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5487","published":"2024-08-12T07:04:12.610Z","updated":"2024-08-16T14:02:11.147Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04741,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5527","published":"2024-08-12T05:31:09.050Z","updated":"2024-08-16T04:01:40.638Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.04702,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5678","published":"2024-08-01T06:54:25.601Z","updated":"2024-08-02T15:40:34.779Z","title":"SQL Injection","severity":"MEDIUM","score":4.7,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.04991,"kevAdded":null,"exploit":false},{"id":"CVE-2024-6748","published":"2024-07-29T16:20:16.449Z","updated":"2024-08-01T21:41:04.605Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.23784,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38872","published":"2024-07-26T17:30:23.932Z","updated":"2024-08-02T04:19:20.244Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.03052,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38871","published":"2024-07-26T17:29:42.911Z","updated":"2024-08-02T04:19:20.491Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.03116,"kevAdded":null,"exploit":false},{"id":"CVE-2024-38870","published":"2024-07-17T16:48:58.815Z","updated":"2024-08-02T04:19:20.403Z","title":"Stored XSS","severity":"LOW","score":3.5,"vendor":"ManageEngine","product":"OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition","kev":false,"epss":0.00283,"kevAdded":null,"exploit":false},{"id":"CVE-2024-5471","published":"2024-07-17T10:56:53.675Z","updated":"2024-08-01T21:11:12.767Z","title":"Agent takeover","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"DDI Central","kev":false,"epss":0.0247,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27311","published":"2024-07-17T10:52:45.823Z","updated":"2024-08-02T00:28:00.298Z","title":"Arbitrary file writing","severity":"MEDIUM","score":5.5,"vendor":"ManageEngine","product":"DDI Central","kev":false,"epss":0.01459,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36038","published":"2024-06-24T11:45:11.075Z","updated":"2024-08-02T03:30:12.484Z","title":"Stored XSS","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.01432,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27313","published":"2024-05-29T11:01:21.278Z","updated":"2024-08-02T00:27:59.908Z","title":"XSS Vulnerability","severity":"MEDIUM","score":6.3,"vendor":"ManageEngine","product":"PAM360","kev":false,"epss":0.01294,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36037","published":"2024-05-27T17:59:52.711Z","updated":"2024-10-25T18:58:51.787Z","title":"Insufficient Access Control Vulnerability","severity":"MEDIUM","score":5.5,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.00458,"kevAdded":null,"exploit":false},{"id":"CVE-2024-36036","published":"2024-05-27T17:58:16.113Z","updated":"2024-10-31T15:21:20.581Z","title":"Insufficient Access Control Vulnerability","severity":"MEDIUM","score":4.2,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27310","published":"2024-05-27T17:26:14.229Z","updated":"2024-10-07T19:44:05.359Z","title":"DOS Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.02274,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27314","published":"2024-05-27T07:03:13.441Z","updated":"2024-08-02T00:27:59.873Z","title":"Stored XSS Vulnerability","severity":"LOW","score":2.4,"vendor":"ManageEngine","product":"ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus","kev":false,"epss":0.01908,"kevAdded":null,"exploit":false},{"id":"CVE-2024-21791","published":"2024-05-22T18:05:23.307Z","updated":"2024-08-01T22:27:36.320Z","title":"SQL Injection in ADAudit Plus","severity":"MEDIUM","score":4.7,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02152,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49335","published":"2024-05-20T17:55:49.809Z","updated":"2024-08-02T21:53:44.995Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49334","published":"2024-05-20T17:55:14.220Z","updated":"2024-08-02T21:53:45.017Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49333","published":"2024-05-20T17:51:50.719Z","updated":"2024-08-02T21:53:45.406Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49332","published":"2024-05-20T17:45:36.459Z","updated":"2024-08-02T21:53:45.011Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49331","published":"2024-05-20T17:35:49.217Z","updated":"2024-08-02T21:53:44.930Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.03005,"kevAdded":null,"exploit":false},{"id":"CVE-2024-27312","published":"2024-05-20T12:38:26.180Z","updated":"2024-10-07T11:45:01.627Z","title":"Authorization vulnerability in PAM360","severity":"HIGH","score":8.1,"vendor":"ManageEngine","product":"PAM360","kev":false,"epss":0.00897,"kevAdded":null,"exploit":false},{"id":"CVE-2023-49330","published":"2024-05-20T12:19:59.734Z","updated":"2024-08-02T21:53:45.218Z","title":"Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.02288,"kevAdded":null,"exploit":false},{"id":"CVE-2024-21775","published":"2024-02-16T14:35:11.451Z","updated":"2024-08-21T14:44:14.705Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"Exchange Reporter Plus","kev":false,"epss":0.05013,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0269","published":"2024-02-02T13:05:35.762Z","updated":"2024-08-01T17:41:16.415Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05366,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0253","published":"2024-02-02T12:50:35.088Z","updated":"2024-08-01T17:41:16.062Z","title":"SQL Injection","severity":"HIGH","score":8.3,"vendor":"ManageEngine","product":"ADAudit Plus","kev":false,"epss":0.05012,"kevAdded":null,"exploit":false},{"id":"CVE-2024-0252","published":"2024-01-11T07:57:12.987Z","updated":"2025-06-17T21:09:15.509Z","title":"Remote code execution","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.07814,"kevAdded":null,"exploit":false},{"id":"CVE-2023-47211","published":"2024-01-08T14:45:37.183Z","updated":"2025-11-04T18:19:03.852Z","title":"A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to…","severity":"CRITICAL","score":9.1,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.47024,"kevAdded":null,"exploit":true},{"id":"CVE-2023-6105","published":"2023-11-15T20:57:47.981Z","updated":"2025-02-13T17:26:03.759Z","title":"ManageEngine Information Disclosure in Multiple Products","severity":"MEDIUM","score":5.5,"vendor":"ManageEngine","product":"Service Desk Plus","kev":false,"epss":0.00694,"kevAdded":null,"exploit":false},{"id":"CVE-2023-4769","published":"2023-11-03T10:55:13.914Z","updated":"2024-09-05T18:05:51.428Z","title":"Server-Side Request Forgery in ManageEngine Desktop Central","severity":"MEDIUM","score":6.6,"vendor":"ManageEngine","product":"Desktop Central","kev":false,"epss":0.03917,"kevAdded":null,"exploit":false},{"id":"CVE-2023-4768","published":"2023-11-03T10:42:59.426Z","updated":"2024-09-05T13:59:05.415Z","title":"Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central","severity":"MEDIUM","score":6.1,"vendor":"ManageEngine","product":"Desktop Central","kev":false,"epss":0.03533,"kevAdded":null,"exploit":false},{"id":"CVE-2023-4767","published":"2023-11-03T10:41:24.845Z","updated":"2024-09-05T13:59:18.678Z","title":"Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central","severity":"MEDIUM","score":6.1,"vendor":"ManageEngine","product":"Desktop Central","kev":false,"epss":0.03533,"kevAdded":null,"exploit":false},{"id":"CVE-2023-35719","published":"2023-09-06T04:03:08.608Z","updated":"2024-09-26T20:24:03.273Z","title":"ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability","severity":"MEDIUM","score":6.8,"vendor":"ManageEngine","product":"ADSelfService Plus","kev":false,"epss":0.24606,"kevAdded":null,"exploit":false},{"id":"CVE-2022-43473","published":"2023-03-30T16:28:35.983Z","updated":"2025-02-11T19:14:03.416Z","title":"A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially crafted XML file can…","severity":"MEDIUM","score":5.8,"vendor":"ManageEngine","product":"OpManager","kev":false,"epss":0.19807,"kevAdded":null,"exploit":true},{"id":"CVE-2016-9498","published":"2018-07-13T20:00:00.000Z","updated":"2024-08-06T02:50:38.639Z","title":"ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects","severity":"CRITICAL","score":9.8,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.2124,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9491","published":"2018-07-13T20:00:00.000Z","updated":"2024-08-06T02:50:38.580Z","title":"ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity","severity":"MEDIUM","score":4.9,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.02526,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9489","published":"2018-07-13T20:00:00.000Z","updated":"2024-08-06T02:50:38.431Z","title":"ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass","severity":"HIGH","score":8.8,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.01659,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9490","published":"2018-06-05T14:00:00.000Z","updated":"2024-08-06T02:50:38.424Z","title":"ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability","severity":"MEDIUM","score":6.1,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.01697,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9488","published":"2018-06-05T14:00:00.000Z","updated":"2024-08-06T02:50:38.390Z","title":"ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities","severity":"CRITICAL","score":9.8,"vendor":"ManageEngine","product":"Applications Manager","kev":false,"epss":0.04617,"kevAdded":null,"exploit":false}]}