Vendor

Zohocorp

94 known vulnerabilities.

Products

ManageEngine Exchange Reporter Plus 15 ManageEngine OpManager 13 ManageEngine Applications Manager 9 DDI Central 8 ManageEngine Firewall Analyzer 7 ManageEngine Key Manager Plus 7 ManageEngine ADSelfService Plus 7 ManageEngine Password Manager Pro 6 ManageEngine PAM360 6 ManageEngine Endpoint Central 6 Log360 3 EventLog Analyzer 3 ManageEngine ADManager Plus 3 Endpoint Central 3 ManageEngine ADAudit Plus 2 ManageEngine Network Configuration Manager 2 ManageEngine DataSecurity Plus 2 manageengine_m365_manager_plus 2 ManageEngine Access Manager Plus 2 ManageEngine NetFlow Analyzer 2 ManageEngine Log360 2 Analytics Plus 2 ManageEngine M365 Security Plus 1 ManageEngine OpUtils 1 ManageEngine Malware Protection Plus 1 ManageEngine Analytics Plus 1 ManageEngine RecoveryManager Plus 1 AssetExplorer 1 ServiceDesk Plus 1 ServiceDesk Plus MSP 1 SupportCenter Plus 1 M365 Manager Plus 1 Zoho Mail wordpress plugin 1 manageengine_ddi_central 1 manageengine_recovery_manager_plus 1 DataSecurity Plus 1 ManageEngine Eventlog Analyzer 1

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 10.0

CVE-2026-6516 Public exploit

Remote Code Execution

Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.

Zohocorp ManageEngine ADAudit Plus

Jul 23, 2026
Critical 9.0

CVE-2026-11374 Public exploit

Account Takeover via Predictable SSO Ticket Generation

In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

Zohocorp ManageEngine ADSelfService Plus ManageEngine ADAudit Plus manageengine_m365_manager_plus

Jun 23, 2026
Medium 5.5

CVE-2025-9435 Public exploit

Path Traversal

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module

Zohocorp ManageEngine ADManager Plus

Jan 13, 2026
High 8.8

CVE-2025-9223 Public exploit

Command Injection

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature.

Zohocorp ManageEngine Applications Manager

Nov 11, 2025