Zoho Corp ZoHo

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Zoho Corp product.

RSS Feeds for Zoho Corp security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Zoho Corp products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Zoho Corp Sorted by Most Security Vulnerabilities since 2018

Zoho Corp Manageengine Adaudit Plus51 vulnerabilities

Zoho Corp Manageengine Admanager Plus44 vulnerabilities

Zoho Corp Manageengine Servicedesk Plus42 vulnerabilities

Zoho Corp Manageengine Opmanager41 vulnerabilities

Zoho Corp Manageengine Adselfservice Plus41 vulnerabilities

Zoho Corp Manageengine Desktop Central38 vulnerabilities

Zoho Corp Manageengine Applications Manager37 vulnerabilities

Zoho Corp Manageengine Supportcenter Plus27 vulnerabilities

Zoho Corp Manageengine Servicedesk Plus Msp26 vulnerabilities

Zoho Corp Manageengine Assetexplorer23 vulnerabilities

Zoho Corp Manageengine Netflow Analyzer21 vulnerabilities

Zoho Corp Manageengine Password Manager Pro16 vulnerabilities

Zoho Corp Manageengine Network Configuration Manager13 vulnerabilities

Zoho Corp Manageengine Pam36013 vulnerabilities

Zoho Corp Manageengine Remote Access Plus11 vulnerabilities

Zoho Corp Manageengine Eventlog Analyzer10 vulnerabilities

Zoho Corp Manageengine Access Manager Plus10 vulnerabilities

Zoho Corp Manageengine Exchange Reporter Plus9 vulnerabilities

Zoho Corp Manageengine Log3608 vulnerabilities

Zoho Corp Manageengine Firewall Analyzer8 vulnerabilities

Zoho Corp Manageengine Oputils7 vulnerabilities

Zoho Corp Manageengine Analytics Plus6 vulnerabilities

Zoho Corp Manageengine Opmanager Msp6 vulnerabilities

Zoho Corp Manageengine Opmanager Plus6 vulnerabilities

Zoho Corp Manageengine Datasecurity Plus6 vulnerabilities

Zoho Corp Manageengine Sharepoint Manager Plus5 vulnerabilities

Zoho Corp Manageengine Key Manager Plus5 vulnerabilities

Zoho Corp Manageengine Device Control Plus4 vulnerabilities

Zoho Corp Manageengine Cloud Security Plus4 vulnerabilities

Zoho Corp Manageengine M365 Manager Plus4 vulnerabilities

Zoho Corp Manageengine Application Control Plus4 vulnerabilities

Zoho Corp Manageengine Browser Security Plus3 vulnerabilities

Zoho Corp Manageengine Patch Connect Plus3 vulnerabilities

Zoho Corp Application Control Plus3 vulnerabilities

Zoho Corp Manageengine Patch Manager Plus3 vulnerabilities

Zoho Corp Manageengine Mobile Device Manager Plus3 vulnerabilities

Zoho Corp Manageengine Manager Plus3 vulnerabilities

Zoho Corp Manageengine Recoverymanager Plus3 vulnerabilities

Zoho Corp Manageengine Remote Monitoring Management Central2 vulnerabilities

Zoho Corp Zoho Forms2 vulnerabilities

Zoho Corp Manageengine Ad3602 vulnerabilities

Zoho Corp Manageengine Ddi Central2 vulnerabilities

Zoho Corp Manageengine Endpoint Central2 vulnerabilities

Zoho Corp Manageengine Endpoint Dlp Plus2 vulnerabilities

Zoho Corp Manageengine Log360 Ueba2 vulnerabilities

Zoho Corp Manageengine M365 Security Plus2 vulnerabilities

Zoho Corp Manageengine Os Deployer2 vulnerabilities

Zoho Corp Manageengine Rmm Central1 vulnerability

Zoho Corp Manageengine Secure Gateway Server1 vulnerability

Zoho Corp Manageengine Remote Monitoring Management1 vulnerability

Zoho Corp Manageengine Endpoint Central Msp1 vulnerability

Zoho Corp Manageengine Supportcentre Plus1 vulnerability

Zoho Corp Manageengine Appcreator1 vulnerability

By the Year

In 2025 there have been 10 vulnerabilities in Zoho Corp with an average score of 5.4 out of ten. Last year, in 2024 Zoho Corp had 53 security vulnerabilities published. Right now, Zoho Corp is on track to have less security vulnerabilities in 2025 than it did last year. Last year, the average CVE base score was greater by 2.69

Year	Vulnerabilities	Average Score
2025	10	5.40
2024	53	8.09
2023	46	6.91
2022	55	7.52
2021	96	8.61
2020	40	7.76
2019	58	7.35
2018	48	7.63

It may take a day or so for new Zoho Corp vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Zoho Corp Security Vulnerabilities

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

CVE-2025-41444 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

CVE-2025-27709 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

CVE-2025-36528 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

CVE-2025-36527 - May 23, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

CVE-2025-41407 - May 23, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module

CVE-2025-3444 - May 22, 2025

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

CVE-2025-3836 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

CVE-2025-41403 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

CVE-2025-3834 - May 14, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

Zohocorp ManageEngine ServiceDesk Plus versions below 14920

CVE-2024-50053 5.4 - Medium - March 21, 2025

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.

XSS

ManageEngine Analytics Plus Authenticated Sensitive Data Exposure Vulnerability

CVE-2024-52323 - November 27, 2024

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account.

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

CVE-2024-49574 8.8 - High - November 18, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

SQL Injection

ManageEngine SharePoint XXE in Management v4503 - November 2024

CVE-2024-10839 8.1 - High - November 08, 2024

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

XXE

ManageEngine ADManager Plus Privilege Escalation - November 2024

CVE-2024-24409 8.8 - High - November 08, 2024

Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option.

SQL Injection in ManageEngine Exchange Reporter Plus Reports

CVE-2024-9459 8.8 - High - November 05, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module.

SQL Injection

SQL Injection Vulnerability in Zoho ManageEngine ADAudit Plus Technician Reports

CVE-2024-36485 8.8 - High - November 04, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option.

SQL Injection

SQL Injection Vulnerability in Zoho ManageEngine ADManager Plus Archived Audit Report

CVE-2024-48878 8.8 - High - November 04, 2024

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

CVE-2024-5608 8.1 - High - October 24, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

SQL Injection

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

CVE-2024-38868 8.3 - High - August 30, 2024

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

AuthZ

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

CVE-2024-6204 8.1 - High - August 30, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

SQL Injection

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability

CVE-2024-5546 8.8 - High - August 28, 2024

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability via a global search option.

SQL Injection

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

CVE-2024-38869 5.4 - Medium - August 23, 2024

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

XSS

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus

CVE-2024-41150 6.1 - Medium - August 23, 2024

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.

XSS

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

CVE-2024-5466 8.8 - High - August 23, 2024

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

Code Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

CVE-2024-36517 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard

CVE-2024-36516 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36515), both of which have affected ADAudit Plus' dashboard.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

CVE-2024-5467 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

CVE-2024-5490 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

CVE-2024-5556 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

CVE-2024-5586 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

CVE-2024-36514 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard

CVE-2024-36515 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard. Note: This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

CVE-2024-5527 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

CVE-2024-5487 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

CVE-2024-36035 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

CVE-2024-36034 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

SQL Injection

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

CVE-2024-5678 4.7 - Medium - August 01, 2024

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.

CVE-2024-38871 8.8 - High - July 26, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.

SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module.

CVE-2024-38872 8.8 - High - July 26, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module.

SQL Injection

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.

CVE-2024-5471 9.8 - Critical - July 17, 2024

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.

Use of Hard-coded Credentials

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which

CVE-2024-27311 8.8 - High - July 17, 2024

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder.

Unrestricted File Upload

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability

CVE-2024-27313 4.6 - Medium - May 29, 2024

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610.

XSS

Zoho ManageEngine ADAudit Plus versions 7260 and below

CVE-2024-36036 4.2 - Medium - May 27, 2024

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration.

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.

CVE-2024-27310 6.5 - Medium - May 27, 2024

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.

Zoho ManageEngine ADAudit Plus versions 7260 and below

CVE-2024-36037 5.5 - Medium - May 27, 2024

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings.

AuthZ

Zoho ManageEngine ServiceDesk Plus versions below 14730

CVE-2024-27314 - May 27, 2024

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users.

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option

CVE-2024-21791 7.2 - High - May 22, 2024

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin users cannot exploit this vulnerability.

Zoho ManageEngine ADAudit Plus versions below 7271

CVE-2023-49333 8.8 - High - May 20, 2024

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature.

Zoho ManageEngine ADAudit Plus versions below 7271

CVE-2023-49335 8.8 - High - May 20, 2024

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details.

Zoho ManageEngine ADAudit Plus versions below 7271

CVE-2023-49332 8.8 - High - May 20, 2024

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares.

Zoho Corp ZoHo

Don't miss out!

RSS Feeds for Zoho Corp security vulnerabilities

Products by Zoho Corp Sorted by Most Security Vulnerabilities since 2018

Zoho Corp Manageengine Adaudit Plus51 vulnerabilities

Zoho Corp Manageengine Admanager Plus44 vulnerabilities

Zoho Corp Manageengine Servicedesk Plus42 vulnerabilities

Zoho Corp Manageengine Opmanager41 vulnerabilities

Zoho Corp Manageengine Adselfservice Plus41 vulnerabilities

Zoho Corp Manageengine Desktop Central38 vulnerabilities

Zoho Corp Manageengine Applications Manager37 vulnerabilities

Zoho Corp Manageengine Supportcenter Plus27 vulnerabilities

Zoho Corp Manageengine Servicedesk Plus Msp26 vulnerabilities

Zoho Corp Manageengine Assetexplorer23 vulnerabilities

Zoho Corp Manageengine Netflow Analyzer21 vulnerabilities

Zoho Corp Manageengine Password Manager Pro16 vulnerabilities

Zoho Corp Manageengine Network Configuration Manager13 vulnerabilities

Zoho Corp Manageengine Pam36013 vulnerabilities

Zoho Corp Manageengine Remote Access Plus11 vulnerabilities

Zoho Corp Manageengine Eventlog Analyzer10 vulnerabilities

Zoho Corp Manageengine Access Manager Plus10 vulnerabilities

Zoho Corp Manageengine Exchange Reporter Plus9 vulnerabilities

Zoho Corp Manageengine Log3608 vulnerabilities

Zoho Corp Manageengine Firewall Analyzer8 vulnerabilities

Zoho Corp Manageengine Oputils7 vulnerabilities

Zoho Corp Manageengine Analytics Plus6 vulnerabilities

Zoho Corp Manageengine Opmanager Msp6 vulnerabilities

Zoho Corp Manageengine Opmanager Plus6 vulnerabilities

Zoho Corp Manageengine Datasecurity Plus6 vulnerabilities

Zoho Corp Manageengine Sharepoint Manager Plus5 vulnerabilities

Zoho Corp Manageengine Key Manager Plus5 vulnerabilities

Zoho Corp Manageengine Device Control Plus4 vulnerabilities

Zoho Corp Manageengine Cloud Security Plus4 vulnerabilities

Zoho Corp Manageengine M365 Manager Plus4 vulnerabilities

Zoho Corp Manageengine Application Control Plus4 vulnerabilities

Zoho Corp Manageengine Browser Security Plus3 vulnerabilities

Zoho Corp Manageengine Patch Connect Plus3 vulnerabilities

Zoho Corp Application Control Plus3 vulnerabilities

Zoho Corp Manageengine Patch Manager Plus3 vulnerabilities

Zoho Corp Manageengine Mobile Device Manager Plus3 vulnerabilities

Zoho Corp Manageengine Manager Plus3 vulnerabilities

Zoho Corp Manageengine Recoverymanager Plus3 vulnerabilities

Zoho Corp Manageengine Remote Monitoring Management Central2 vulnerabilities

Zoho Corp Zoho Forms2 vulnerabilities

Zoho Corp Manageengine Ad3602 vulnerabilities

Zoho Corp Manageengine Ddi Central2 vulnerabilities

Zoho Corp Manageengine Endpoint Central2 vulnerabilities

Zoho Corp Manageengine Endpoint Dlp Plus2 vulnerabilities

Zoho Corp Manageengine Log360 Ueba2 vulnerabilities

Zoho Corp Manageengine M365 Security Plus2 vulnerabilities

Zoho Corp Manageengine Os Deployer2 vulnerabilities

Zoho Corp Manageengine Rmm Central1 vulnerability

Zoho Corp Manageengine Secure Gateway Server1 vulnerability

Zoho Corp Manageengine Remote Monitoring Management1 vulnerability

Zoho Corp Manageengine Endpoint Central Msp1 vulnerability

Zoho Corp Manageengine Supportcentre Plus1 vulnerability

Zoho Corp Manageengine Appcreator1 vulnerability

By the Year

Recent Zoho Corp Security Vulnerabilities

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module. CVE-2025-41444 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports. CVE-2025-27709 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports. CVE-2025-36528 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports. CVE-2025-36527 - May 23, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report. CVE-2025-41407 - May 23, 2025

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module CVE-2025-3444 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report. CVE-2025-3836 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data. CVE-2025-41403 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report. CVE-2025-3834 - May 14, 2025

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 CVE-2024-50053 5.4 - Medium - March 21, 2025

ManageEngine Analytics Plus Authenticated Sensitive Data Exposure Vulnerability CVE-2024-52323 - November 27, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module. CVE-2024-49574 8.8 - High - November 18, 2024

ManageEngine SharePoint XXE in Management v4503 - November 2024 CVE-2024-10839 8.1 - High - November 08, 2024

ManageEngine ADManager Plus Privilege Escalation - November 2024 CVE-2024-24409 8.8 - High - November 08, 2024

SQL Injection in ManageEngine Exchange Reporter Plus Reports CVE-2024-9459 8.8 - High - November 05, 2024

SQL Injection Vulnerability in Zoho ManageEngine ADAudit Plus Technician Reports CVE-2024-36485 8.8 - High - November 04, 2024

SQL Injection Vulnerability in Zoho ManageEngine ADManager Plus Archived Audit Report CVE-2024-48878 8.8 - High - November 04, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature. CVE-2024-5608 8.1 - High - October 24, 2024

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15 CVE-2024-38868 8.3 - High - August 30, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module. CVE-2024-6204 8.1 - High - August 30, 2024

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability CVE-2024-5546 8.8 - High - August 28, 2024

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

CVE-2025-41444 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

CVE-2025-27709 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

CVE-2025-36528 - June 09, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.

CVE-2025-36527 - May 23, 2025

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.

CVE-2025-41407 - May 23, 2025

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module

CVE-2025-3444 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.

CVE-2025-3836 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.

CVE-2025-41403 - May 22, 2025

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report.

CVE-2025-3834 - May 14, 2025

Zohocorp ManageEngine ServiceDesk Plus versions below 14920

CVE-2024-50053 5.4 - Medium - March 21, 2025

ManageEngine Analytics Plus Authenticated Sensitive Data Exposure Vulnerability

CVE-2024-52323 - November 27, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in the reports module.

CVE-2024-49574 8.8 - High - November 18, 2024

ManageEngine SharePoint XXE in Management v4503 - November 2024

CVE-2024-10839 8.1 - High - November 08, 2024

ManageEngine ADManager Plus Privilege Escalation - November 2024

CVE-2024-24409 8.8 - High - November 08, 2024

SQL Injection in ManageEngine Exchange Reporter Plus Reports

CVE-2024-9459 8.8 - High - November 05, 2024

SQL Injection Vulnerability in Zoho ManageEngine ADAudit Plus Technician Reports

CVE-2024-36485 8.8 - High - November 04, 2024

SQL Injection Vulnerability in Zoho ManageEngine ADManager Plus Archived Audit Report

CVE-2024-48878 8.8 - High - November 04, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature.

CVE-2024-5608 8.1 - High - October 24, 2024

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability while isolating the devices.This issue affects Endpoint Central: before 11.3.2406.08 and before 11.3.2400.15

CVE-2024-38868 8.3 - High - August 30, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module.

CVE-2024-6204 8.1 - High - August 30, 2024

Zohocorp ManageEngine Password Manager Pro versions before 12431 and ManageEngine PAM360 versions before 7001 are affected by authenticated SQL Injection vulnerability

CVE-2024-5546 8.8 - High - August 28, 2024

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.

CVE-2024-38869 5.4 - Medium - August 23, 2024

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus

CVE-2024-41150 6.1 - Medium - August 23, 2024

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option.

CVE-2024-5466 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in alerts module.

CVE-2024-36517 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard

CVE-2024-36516 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in account lockout report.

CVE-2024-5467 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option.

CVE-2024-5490 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in reports module.

CVE-2024-5556 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to the authenticated SQL injection in extranet lockouts report option.

CVE-2024-5586 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in file summary option.

CVE-2024-36514 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in dashboard

CVE-2024-36515 8.8 - High - August 23, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in file auditing configuration.

CVE-2024-5527 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option.

CVE-2024-5487 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in user session recording.

CVE-2024-36035 8.8 - High - August 12, 2024

Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option.

CVE-2024-36034 8.8 - High - August 12, 2024

Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.

CVE-2024-5678 4.7 - Medium - August 01, 2024

Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module.

CVE-2024-38871 8.8 - High - July 26, 2024