| CVE-2021-20136 | CRÍTICO9.8 | ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite. An unauthenticated remote attacker can send a specially crafted message to Log360 to change its backend database to an attacker-controlled database and to force Log360 to restart. An att | 01/11/2021 |
| CVE-2021-35512 | MEDIO6.5 | An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200. | 21/10/2021 |
| CVE-2021-41075 | CRÍTICO9.8 | The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API. | 13/10/2021 |
| CVE-2021-40493 | CRÍTICO9.8 | Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API. | 13/10/2021 |
| CVE-2021-20131 | ALTO8.8 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface. | 13/10/2021 |
| CVE-2021-20130 | ALTO8.8 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface. | 13/10/2021 |
| CVE-2021-38298 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus before 7110 is vulnerable to blind XXE. | 07/10/2021 |
| CVE-2021-37931 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37930 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37929 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37928 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37926 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37924 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37923 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37922 | MEDIO5.3 | Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another. | 07/10/2021 |
| CVE-2021-37921 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37920 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37919 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37918 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution. | 07/10/2021 |
| CVE-2021-37762 | CRÍTICO9.8 | Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution. | 07/10/2021 |