MA
Product
Manageengine Assetexplorer
On CISA KEVExploited in the wildRansomware-linked
26
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 12Low 0
Watch
Add Manageengine Assetexplorer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12959 | 8.8 | Aug 8 | Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter Affected: before 6.2.0 |
| CVE-2023-35785 | 8.1 | Aug 28 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,… Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +34 more |
| CVE-2019-14693 | 8.1 | Aug 8 | Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data Affected: 6.2.0 |
| CVE-2023-26601 | 7.5 | Mar 6 | Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service… Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +32 more |
| CVE-2022-35403 | 7.5 | Jul 12 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure… Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +20 more |
| CVE-2021-20109 | 7.5 | Jul 19 | Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP… Affected: 1.0.34 |
| CVE-2021-20108 | 7.5 | Jul 19 | Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server Affected: 1.0.34 |
| CVE-2019-19034 | 7.2 | Mar 23 | Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for… Affected: 6.5 |
Showing 8