Manageengine Social IT Plus vulnerabilities | LiveThreat CVE Feed

Product

Manageengine Social IT Plus

by Zohocorp · last CVE Dec 10, 2014

CVEs

On KEV

–

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 0Low 0

Severity

Exploitation

Watch

Add Manageengine Social IT Plus to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-7866	–	80%	Dec 10	Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or… Affected: 11.0
CVE-2014-7868	–	73%	Dec 4	Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated… Affected: 11.0
CVE-2014-7867	–	40%	Dec 4	SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and… Affected: 11.0
CVE-2014-6036	–	36%	Dec 4	Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows… Affected: 11.0
CVE-2014-6034	–	79%	Dec 4	Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus… Affected: 11.0