Vendor
Zohocorp
97 known vulnerabilities.
Products
ManageEngine Exchange Reporter Plus 15
ManageEngine OpManager 13
DDI Central 11
ManageEngine Applications Manager 9
ManageEngine Firewall Analyzer 7
ManageEngine Key Manager Plus 7
ManageEngine ADSelfService Plus 7
ManageEngine Password Manager Pro 6
ManageEngine PAM360 6
ManageEngine Endpoint Central 6
Log360 3
EventLog Analyzer 3
ManageEngine ADManager Plus 3
Endpoint Central 3
ManageEngine ADAudit Plus 2
ManageEngine Network Configuration Manager 2
ManageEngine DataSecurity Plus 2
manageengine_m365_manager_plus 2
ManageEngine Access Manager Plus 2
ManageEngine NetFlow Analyzer 2
ManageEngine Log360 2
Analytics Plus 2
ManageEngine M365 Security Plus 1
ManageEngine OpUtils 1
ManageEngine Malware Protection Plus 1
ManageEngine Analytics Plus 1
ManageEngine RecoveryManager Plus 1
AssetExplorer 1
ServiceDesk Plus 1
ServiceDesk Plus MSP 1
SupportCenter Plus 1
M365 Manager Plus 1
Zoho Mail wordpress plugin 1
manageengine_ddi_central 1
manageengine_recovery_manager_plus 1
DataSecurity Plus 1
ManageEngine Eventlog Analyzer 1
2 results · Clear filters · Feed
-
Critical 10.0CVE-2026-6516 Public exploit
Remote Code Execution
Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.
-
Critical 9.0CVE-2026-11374 Public exploit
Account Takeover via Predictable SSO Ticket Generation
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.