Advisories · Technology
Zohocorp ManageEngine ADAudit Plus.
Every CVE that names Zohocorp ManageEngine ADAudit Plus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Remote Code Execution
- Zohocorp ManageEngine ADAudit Plus
- Command injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Account Takeover via Predictable SSO Ticket Generation
- zohocorp manageengine_adselfservice_plus
- zohocorp manageengine_recovery_manager_plus
- Authentication bypass
- Weak cryptography or TLS