Advisories · Technology

Zohocorp ManageEngine Applications Manager.

Every CVE that names Zohocorp ManageEngine Applications Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-86678 CVE record

CVSS 8.8 High

Broken Authentication vulnerability
- Zohocorp ManageEngine Applications Manager
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-86677 CVE record

CVSS 8.8 High

Broken Authentication vulnerability
- Zohocorp ManageEngine Applications Manager
- SQL injection
Not analysed yet 23 Sept 2026
CVE-2026-86679 CVE record

CVSS 7.1 High

Broken Access Control vulnerability
- Zohocorp ManageEngine Applications Manager
- CWE-20
Not analysed yet 23 Sept 2026
CVE-2026-86683 CVE record

CVSS 8.1 High

Broken Authentication Vulnerability
- Zohocorp ManageEngine Applications Manager
- CWE-20
Not analysed yet 23 Sept 2026
CVE-2026-86681 CVE record

CVSS 7.6 High

Broken Access Control vulnerability
- Zohocorp ManageEngine Applications Manager
- Authentication bypass
Not analysed yet 23 Sept 2026
CVE-2026-86708 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Sensitive data exposure
- Zohocorp ManageEngine Applications Manager
- Hard-coded credentials
Not analysed yet 23 Sept 2026
CVE-2025-9787 CVE record

CVSS 6.1 Medium

Stored XSS
- Zohocorp ManageEngine Applications Manager
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025
CVE-2025-9223 CVE record

CVSS 8.8 High

Command Injection
- Zohocorp ManageEngine Applications Manager
- Command injection
Not analysed yet 11 Nov 2025
CVE-2025-6239 CVE record

CVSS 6.5 Medium

Information disclosure
- Zohocorp ManageEngine Applications Manager
- Information disclosure
Not analysed yet 21 Oct 2025