Login Request a demo
ML
Product
ManageEngine Log360
by Zohocorp · last CVE Sep 24, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 4Medium 3Low 0
Severity
All severities11Critical4High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ManageEngine Log360 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-20136
9.8
11%
Nov 1
ManageEngine Log360 Builds < 5235 are affected by an improper access control vulnerability allowing database configuration overwrite
Affected: through 5.2; 5.3; 5.3; 5.3
CVE-2021-40177
9.8
5%
Aug 29
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite
Affected: through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +7 more
CVE-2021-40175
9.8
7%
Aug 29
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution
Affected: through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +4 more
CVE-2020-24786
9.8
13%
Aug 31
An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817,…
Affected: through 5.0; 5.1; 5.1; 5.1; 5.1; 5.1; +7 more
CVE-2021-40174
8.8
1%
Aug 29
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings
Affected: through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +6 more
CVE-2021-40172
8.8
1%
Aug 29
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings
Affected: 5.0 through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +4 more
CVE-2026-3324
8.2
1%
Apr 16
Authentication Bypass
Affected: 13000 through 13013
CVE-2023-35785
8.1
2%
Aug 28
Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,…
Affected: before 5.3; 5.3; 5.3; 5.3; 5.3; 5.3; +2 more
CVE-2021-40178
6.1
1%
Aug 29
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings
Affected: through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +6 more
CVE-2021-40176
6.1
1%
Aug 29
Zoho ManageEngine Log360 before Build 5225 allows stored XSS
Affected: through 5.1; 5.2; 5.2; 5.2; 5.2; 5.2; +7 more
CVE-2026-92905
5.3
1%
Sep 24
Denial of Service Vulnerability
Affected: before 13071
Showing 11