厂商漏洞
「zohocorp」的相关漏洞
| 产品名称 | AVD编号 | 漏洞名称 | 披露时间 |
|---|---|---|---|
| Application Control Plus | |||
| AVD-2020-15594 | Zoho Application Control Plus信息泄漏漏洞 | 2020-10-01 | |
| AVD-2020-15595 | zohocorp application_control_plus 关键资源的不正确权限授予 | 2020-10-01 | |
| Desktop Central | |||
| AVD-2014-7862 | ManageEngine Desktop Central远程安全绕过漏洞 | 2018-01-05 | |
| Firewall Analyzer | |||
| AVD-2018-12998 | Zoho ManageEngine Netflow Analyzer operation Reflected 跨站脚本攻击 | 2018-06-30 | |
| AVD-2018-12997 | 多款ZOHO产品访问控制错误漏洞 | 2018-06-30 | |
| Log360 | |||
| AVD-2021-44651 | zohocorp manageengine_cloud_security_plus 危险类型文件的不加限制上传 | 2022-01-12 | |
| Manageengine Access Manager Plus | |||
| AVD-2022-29081 | zohocorp manageengine_password_manager_pro 授权机制不正确 | 2022-04-29 | |
| AVD-2021-44676 | zohocorp manageengine_access_manager_plus 将资源暴露给错误范围 | 2021-12-20 | |
| Manageengine Ad360 | |||
| AVD-2020-24786 | zohocorp manageengine_adselfservice_plus 认证机制不恰当 | 2020-09-01 | |
| Manageengine Adaudit Plus | |||
| AVD-2021-42847 | Zoho ManageEngine ADAudit Plus up to 7005 Privilege Escalation | 2021-11-11 | |
| AVD-2020-11531 | zohocorp manageengine_adaudit_plus 对路径名的限制不恰当（路径遍历） | 2020-05-09 | |
| AVD-2022-28219 | Zoho ManageEngine ADAudit Plus XXE漏洞（CVE-2022-28219） | 2022-04-06 | |
| AVD-2020-24786 | zohocorp manageengine_adselfservice_plus 认证机制不恰当 | 2020-09-01 | |
| AVD-2018-10466 | Zoho ManageEngine ADAudit Plus 至 5.0.0 Blind sql 注入漏洞 | 2018-05-30 | |
| AVD-2018-19118 | 拒绝服务 | 2018-12-14 | |
| AVD-2020-11532 | zohocorp manageengine_adaudit_plus 认证机制不恰当 | 2020-05-09 | |
| AVD-2022-24978 | zohocorp manageengine_adaudit_plus 不充分的凭证保护机制 | 2022-04-06 | |
| AVD-2022-29457 | zohocorp manageengine_adaudit_plus 不充分的凭证保护机制 | 2022-04-19 | |
| Manageengine Admanager Plus | |||
| AVD-2021-37923 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-10-08 | |
| AVD-2021-37922 | zohocorp manageengine_admanager_plus 对路径名的限制不恰当（路径遍历） | 2021-10-08 | |
| AVD-2021-37919 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-10-08 | |
| AVD-2021-37761 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-09-28 | |
| AVD-2021-20130 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-10-14 | |
| AVD-2021-37424 | zohocorp manageengine_admanager_plus 特权管理不恰当 | 2021-09-21 | |
| AVD-2021-42002 | zohocorp manageengine_admanager_plus 授权机制不正确 | 2021-11-11 | |
| AVD-2021-37930 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-10-08 | |
| AVD-2021-37924 | zohocorp manageengine_admanager_plus 危险类型文件的不加限制上传 | 2021-10-08 | |
| AVD-2018-15740 | Zoho ManageEngine ADManager Plus 6.5.7 Workflow Delegation/Requester Roles 跨站脚本攻击 | 2018-08-29 | |
| AVD-2022-29457 | zohocorp manageengine_adaudit_plus 不充分的凭证保护机制 | 2022-04-19 | |
| AVD-2019-12876 | Zoho ManageEngine ADManager Plus、ADSelfService Plus和DesktopCentral 权限许可和访问控制问题漏洞 | 2019-07-18 |