Skip to content
OpenAdvisories

Product · ManageEngine

SharePoint Manager Plus

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.9
    CVE-2026-119682

    Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus

    An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration set…

    ManageEngine SharePoint Manager Plus
  • High 8.5
    CVE-2026-119680

    Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature

    A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to…

    ManageEngine SharePoint Manager Plus
  • High 8.5
    CVE-2024-10839

    XML External Entity

    Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

    ManageEngine SharePoint Manager Plus