MA
Product
Manageengine Admanager Plus
On CISA KEVExploited in the wildRansomware-linked
53
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 15Medium 14Low 0
Watch
Add Manageengine Admanager Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10020 | 8.8 | Oct 21 | Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component Affected: before 8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +4 more |
| CVE-2024-24409 | 8.8 | Nov 8 | Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option Affected: 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +34 more |
| CVE-2024-48878 | 8.8 | Nov 4 | Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report Affected: before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +12 more |
| CVE-2022-29457 | 8.8 | Apr 18 | Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path… Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +16 more |
| CVE-2021-20131 | 8.8 | Oct 13 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2021-20130 | 8.8 | Oct 13 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2021-37741 | 8.8 | Sep 21 | ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2017-17552 | 8.8 | Feb 7 | /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF… Affected: before 6.6; 6.6; 6.6; 6.6; 6.6; 6.6; +1 more |
| CVE-2023-35785 | 8.1 | Aug 28 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,… Affected: before 7.2; 7.2 |
| CVE-2021-37419 | 7.5 | Sep 21 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +8 more |
| CVE-2019-12876 | 7.3 | Jul 17 | Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to… Affected: 6.6.5 |
| CVE-2023-38743 | 7.2 | Sep 11 | Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine Affected: before 7.2 |
| CVE-2023-29084 | 7.2 | Apr 13 | Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +27 more |
| CVE-2022-42904 | 7.2 | Nov 18 | Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +21 more |
| CVE-2018-19374 | 7.0 | Apr 30 | Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges (after a reboot) by placing a Trojan horse file into the permissive bin directory Affected: 6.6 |
Showing 15