Login Request a demo
AM
Product
Applications Manager
by ManageEngine · last CVE Jul 23, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities10Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Applications Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-9488
9.8
5%
Jun 5
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities
Affected: 12.0; 13.0
CVE-2024-41140
6.5
1%
Jan 29
Improper Authorization
Affected: through 174000
CVE-2016-9490
6.1
2%
Jun 5
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability
Affected: 12.0; 13.0
CVE-2025-27930
5.4
0%
Jul 23
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.
Affected: through 176600
CVE-2012-1063
–
1%
Feb 14
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to…
Affected: 10.0; 10.1; 10.2; 10.3; 9.1; 9.2; +3 more
CVE-2012-1062
–
1%
Feb 14
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1)…
Affected: 10.0; 10.1; 10.2; 10.3; 9; 9.1; +4 more
CVE-2008-1566
–
1%
Mar 31
Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query…
Affected: 8.1; 8.2
CVE-2008-0474
–
1%
Jan 29
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1)…
Affected: 8.1_build_8100
CVE-2008-0476
–
1%
Jan 29
ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows remote attackers to obtain sensitive…
Affected: 8.1_build_8100
CVE-2008-0475
–
1%
Jan 29
ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summary) via an invalid URI, as demonstrated by the "/-" URI
Affected: 8.1_build_8100
Showing 10