Advisories · Technology
ManageEngine Applications Manager.
Every CVE that names ManageEngine Applications Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Stored XSS
- ManageEngine Applications Manager
- Cross-site scripting (XSS)
- CVSS 8.1 High
Improper Authorization
- ManageEngine Applications Manager
- Broken access control
- CVSS 4.7 Medium
SQL Injection
- ManageEngine Applications Manager
- SQL injection
-
ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects
- ManageEngine Applications Manager
- Insecure deserialization
-
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity
- ManageEngine Applications Manager
- XML external entities (XXE)
-
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass
- ManageEngine Applications Manager
- Privilege escalation
-
ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability
- ManageEngine Applications Manager
- Cross-site scripting (XSS)
-
ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities
- ManageEngine Applications Manager
- SQL injection