MA
Product
Manageengine Admanager Plus
On CISA KEVExploited in the wildRansomware-linked
53
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 15Medium 14Low 0
Watch
Add Manageengine Admanager Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31492 | 6.5 | Aug 17 | Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +30 more |
| CVE-2023-38332 | 6.5 | Aug 4 | Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure Affected: before 7.2; 7.2; 7.2 |
| CVE-2021-37420 | 6.5 | Sep 21 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing Affected: before 6.1; 6.1; 6.1; 6.1; 6.1; 6.1; +8 more |
| CVE-2021-36772 | 6.1 | Jul 17 | Zoho ManageEngine ADManager Plus before 7110 allows stored XSS Affected: before 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2021-36771 | 6.1 | Jul 17 | Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS Affected: before 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2020-35594 | 6.1 | Mar 5 | Zoho ManageEngine ADManager Plus before 7066 allows XSS Affected: before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +17 more |
| CVE-2018-15740 | 6.1 | Aug 28 | Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen Affected: 6.5.7 |
| CVE-2025-9435 | 5.5 | Jan 13 | Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module Affected: before 7.2; 7.2; 7.2; 7.2; 7.2; 7.2; +7 more |
| CVE-2023-6105 | 5.5 | Nov 15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed Affected: before 7.2; 7.2; 7.2; 7.2; 7.2 |
| CVE-2023-41904 | 5.4 | Sep 27 | Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs Affected: before 7.2; 7.2; 7.2; 7.2 |
| CVE-2021-37922 | 5.3 | Oct 7 | Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1 |
| CVE-2023-39912 | 4.9 | Aug 31 | Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed Affected: before 7.2; 7.2; 7.2; 7.2 |
| CVE-2023-35786 | 4.9 | Jul 5 | Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files Affected: before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +30 more |
| CVE-2025-11670 | 4.3 | Dec 15 | Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as… Affected: before 8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +4 more |
Showing 14