ZO
Vendor
Zohocorp
782
CVEs
31
On KEV
3
New 30D
Products
DC8.8
DDI Central
Zohocorp
5 CVEs0 on KEV2 new
MM4.9
ManageEngine Malware Protection Plus
Zohocorp
1 CVEs0 on KEV1 new
MS9.8
Manageengine Servicedesk Plus
Zohocorp
50 CVEs4 on KEV0 new
MD10.0
Manageengine Desktop Central
Zohocorp
48 CVEs2 on KEV0 new
MS9.8
Manageengine Supportcenter Plus
Zohocorp
31 CVEs2 on KEV0 new
MP9.8
ManageEngine Password Manager Pro
Zohocorp
26 CVEs2 on KEV0 new
MS9.8
Manageengine Servicedesk Plus Msp
Zohocorp
26 CVEs2 on KEV0 new
MP9.8
ManageEngine PAM360
Zohocorp
18 CVEs2 on KEV0 new
MA9.8
ManageEngine Access Manager Plus
Zohocorp
12 CVEs2 on KEV0 new
MA10.0
manageengine_adaudit_plus
zohocorp
54 CVEs1 on KEV0 new
MA9.8
Manageengine Admanager Plus
Zohocorp
53 CVEs1 on KEV0 new
MA9.8
Manageengine Assetexplorer
Zohocorp
26 CVEs1 on KEV0 new
MR9.8
Manageengine Remote Access Plus
Zohocorp
14 CVEs1 on KEV0 new
MA9.8
Manageengine Analytics Plus
Zohocorp
7 CVEs1 on KEV0 new
MK9.8
Manageengine Key Manager Plus
Zohocorp
5 CVEs1 on KEV0 new
MA9.8
Manageengine Application Control Plus
Zohocorp
4 CVEs1 on KEV0 new
MD9.8
Manageengine Device Control Plus
Zohocorp
4 CVEs1 on KEV0 new
MA9.8
Manageengine Ad360
Zohocorp
3 CVEs1 on KEV0 new
MB9.8
Manageengine Browser Security Plus
Zohocorp
3 CVEs1 on KEV0 new
MP9.8
Manageengine Patch Manager Plus
Zohocorp
3 CVEs1 on KEV0 new
MV9.8
Manageengine Vulnerability Manager Plus
Zohocorp
3 CVEs1 on KEV0 new
ME9.8
Manageengine Endpoint Dlp Plus
Zohocorp
2 CVEs1 on KEV0 new
MO9.8
Manageengine OS Deployer
Zohocorp
2 CVEs1 on KEV0 new
MR9.8
Manageengine Remote Monitoring And Management Central
Zohocorp
2 CVEs1 on KEV0 new
MO9.9
ManageEngine OpManager
Zohocorp
67 CVEs0 on KEV0 new
MA10.0
ManageEngine Applications Manager
Zohocorp
62 CVEs0 on KEV0 new
MN9.8
ManageEngine NetFlow Analyzer
Zohocorp
29 CVEs0 on KEV0 new
ME9.8
Manageengine Exchange Reporter Plus
Zohocorp
28 CVEs0 on KEV0 new
ME9.8
ManageEngine EventLog Analyzer
Zohocorp
20 CVEs0 on KEV0 new
MF9.8
ManageEngine Firewall Analyzer
Zohocorp
19 CVEs0 on KEV0 new
MN9.8
ManageEngine Network Configuration Manager
Zohocorp
16 CVEs0 on KEV0 new
ME8.3
ManageEngine Endpoint Central
Zohocorp
13 CVEs0 on KEV0 new
ML9.8
ManageEngine Log360
Zohocorp
11 CVEs0 on KEV0 new
MD9.8
ManageEngine DataSecurity Plus
Zohocorp
9 CVEs0 on KEV0 new
MI7.5
Manageengine It360
Zohocorp
9 CVEs0 on KEV0 new
MO8.8
Manageengine Oputils
Zohocorp
8 CVEs0 on KEV0 new
MA9.8
manageengine_m365_manager_plus
zohocorp
6 CVEs0 on KEV0 new
MO8.8
Manageengine Opmanager Msp
Zohocorp
6 CVEs0 on KEV0 new
MO8.8
Manageengine Opmanager Plus
Zohocorp
6 CVEs0 on KEV0 new
MC9.8
Manageengine Cloud Security Plus
Zohocorp
5 CVEs0 on KEV0 new
MS9.8
Manageengine Sharepoint Manager Plus
Zohocorp
5 CVEs0 on KEV0 new
MS–
Manageengine Social IT Plus
Zohocorp
5 CVEs0 on KEV0 new
SP8.8
Servicedesk Plus
Zohocorp
5 CVEs0 on KEV0 new
MR8.4
ManageEngine RecoveryManager Plus
Zohocorp
4 CVEs0 on KEV0 new
WF9.8
Webnms Framework
Zohocorp
4 CVEs0 on KEV0 new
MA9.8
manageengine_ddi_central
zohocorp
3 CVEs0 on KEV0 new
MM8.5
ManageEngine M365 Security Plus
Zohocorp
3 CVEs0 on KEV0 new
MM7.8
Manageengine Mobile Device Manager Plus
Zohocorp
3 CVEs0 on KEV0 new
MO9.8
Manageengine O365 Manager Plus
Zohocorp
3 CVEs0 on KEV0 new
MP9.8
Manageengine Patch Connect Plus
Zohocorp
3 CVEs0 on KEV0 new
FA7.5
Firewall Analyzer
Zohocorp
2 CVEs0 on KEV0 new
MD9.8
Manageengine Desktop Central Managed Service Providers
Zohocorp
2 CVEs0 on KEV0 new
ML8.1
Manageengine Log360 Ueba
Zohocorp
2 CVEs0 on KEV0 new
MO–
Manageengine Opstor
Zohocorp
2 CVEs0 on KEV0 new
MA9.0
manageengine_recovery_manager_plus
zohocorp
2 CVEs0 on KEV0 new
ZC6.5
Zoho Crm Lead Magnet
Zohocorp
2 CVEs0 on KEV0 new
ZF5.4
Zoho Forms
Zohocorp
2 CVEs0 on KEV0 new
DC9.8
Desktop Central
Zohocorp
1 CVEs0 on KEV0 new
LO8.8
Log360
Zohocorp
1 CVEs0 on KEV0 new
MA5.5
Manageengine Appcreator
Zohocorp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-14308 | MM ManageEngine Malware Protection Plus Zohocorp | 4.9 | Oct 13 | Insufficient Signature Validation |
| CVE-2026-12265 | DC DDI Central Zohocorp | 8.8 | Sep 28 | Missing Authorization on HA Failover Config allows Complete Data Destruction |
| CVE-2026-12264 | DC DDI Central Zohocorp | 8.8 | Sep 28 | Authenticated File Write via HA Failover Config Upload leads to RCE |
| CVE-2026-12267 | DC DDI Central Zohocorp | 7.2 | Sep 28 | Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE |
| CVE-2026-12268 | DC DDI Central Zohocorp | 8.8 | Sep 28 | Authenticated PowerShell Injection leads to RCE |
| CVE-2026-12269 | DC DDI Central Zohocorp | 8.8 | Sep 28 | Authenticated File Write to RCE via keepalived in DDI Central |
| CVE-2026-92905 | ME ManageEngine EventLog Analyzer Zohocorp | 5.3 | Sep 24 | Denial of Service Vulnerability |
| CVE-2026-86678 | MA ManageEngine Applications Manager Zohocorp | 8.8 | Sep 23 | Broken Authentication vulnerability |
| CVE-2026-86677 | MA ManageEngine Applications Manager Zohocorp | 8.8 | Sep 23 | Broken Authentication vulnerability |
| CVE-2026-86679 | MA ManageEngine Applications Manager Zohocorp | 7.1 | Sep 23 | Broken Access Control vulnerability |
| CVE-2026-86683 | MA ManageEngine Applications Manager Zohocorp | 8.1 | Sep 23 | Broken Authentication Vulnerability |
| CVE-2026-86681 | MA ManageEngine Applications Manager Zohocorp | 7.6 | Sep 23 | Broken Access Control vulnerability |
| CVE-2026-86708 | MA ManageEngine Applications Manager Zohocorp | 10.0 | Sep 23 | Sensitive data exposure |
| CVE-2026-19599 | MO ManageEngine OpManager Zohocorp | 9.9 | Sep 23 | Remote Code Execution vulnerability |
| CVE-2026-75825 | MO ManageEngine OpManager Zohocorp | 8.8 | Sep 23 | Authentication Bypass vulnerability |
| CVE-2026-76978 | MO ManageEngine OpManager Zohocorp | 8.8 | Sep 23 | Command Injection vulnerability |
| CVE-2026-76979 | MO ManageEngine OpManager Zohocorp | 7.7 | Sep 23 | XML Injection vulnerability |
| CVE-2026-76980 | MO ManageEngine OpManager Zohocorp | 7.4 | Sep 23 | Data Exposure vulnerability |
| CVE-2026-84787 | MO ManageEngine OpManager Zohocorp | 8.1 | Sep 23 | Privilege Escalation vulnerability |
| CVE-2026-84789 | MF ManageEngine Firewall Analyzer Zohocorp | 7.1 | Sep 23 | Broken Access Control vulnerability |
| CVE-2026-84791 | MO ManageEngine OpManager Zohocorp | 7.1 | Sep 23 | Broken Access Control vulnerability |
| CVE-2026-15358 | MN ManageEngine Network Configuration Manager Zohocorp | 7.5 | Sep 23 | Path Traversal Vulnerability |
| CVE-2026-14913 | MF ManageEngine Firewall Analyzer Zohocorp | 8.8 | Sep 23 | SQL Injection vulnerability |
| CVE-2026-12370 | MN ManageEngine Network Configuration Manager Zohocorp | 7.6 | Sep 23 | Remote Code Execution Vulnerability |
| CVE-2026-18912 | MD ManageEngine DataSecurity Plus Zohocorp | 7.7 | Sep 18 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an authenticated SQL injection vulnerability, allowing an authenticated technician to execute arbitrary SQL… |
| CVE-2026-18911 | MD ManageEngine DataSecurity Plus Zohocorp | 7.5 | Sep 18 | ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication |
| CVE-2026-77697 | ME ManageEngine Endpoint Central Zohocorp | 6.3 | Sep 7 | Privilege Escalation |
| CVE-2026-85640 | ME ManageEngine Endpoint Central Zohocorp | 6.3 | Sep 7 | Privilege Escalation |
| CVE-2026-77699 | ME ManageEngine Endpoint Central Zohocorp | 5.0 | Sep 7 | Privilege Escalation |
| CVE-2026-77698 | ME ManageEngine Endpoint Central Zohocorp | 5.7 | Sep 7 | Privilege Escalation |
| CVE-2026-14828 | MA ManageEngine Access Manager Plus Zohocorp | 8.8 | Sep 2 | Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL… |
| CVE-2026-12263 | MP ManageEngine PAM360 Zohocorp | 8.8 | Aug 13 | Authentication Bypass |
| CVE-2026-11840 | MP ManageEngine PAM360 Zohocorp | 8.8 | Aug 13 | SQL Injection |
| CVE-2026-12571 | MA manageengine_ddi_central zohocorp | 9.8 | Aug 11 | Authentication Bypass Leading to Account Takeover |
| CVE-2026-16053 | MM ManageEngine M365 Manager Plus Zohocorp | 8.5 | Aug 11 | Path Traversal |
| CVE-2026-6516 | MA ManageEngine ADAudit Plus Zohocorp | 10.0 | Jul 23 | Remote Code Execution |
| CVE-2026-3182 | ME ManageEngine Endpoint Central Zohocorp | 4.3 | Jul 21 | Sensitive Data Exposure |
| CVE-2026-11374 | MA manageengine_m365_manager_plus zohocorp | 9.0 | Jun 23 | Account Takeover via Predictable SSO Ticket Generation |
| CVE-2026-8174 | ZM Zoho Mail wordpress plugin Zohocorp | 5.7 | May 26 | Cross-site Request Forgery |
| CVE-2026-2740 | MR ManageEngine RecoveryManager Plus Zohocorp | 8.4 | May 21 | Remote Code Execution |
| CVE-2026-3324 | ML ManageEngine Log360 Zohocorp | 8.2 | Apr 16 | Authentication Bypass |
| CVE-2026-5785 | MP ManageEngine Password Manager Pro Zohocorp | 8.1 | Apr 16 | SQL Injection |
| CVE-2026-27655 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report |
| CVE-2026-4108 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report |
| CVE-2026-4107 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report |
| CVE-2026-3880 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report |
| CVE-2026-3879 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report |
| CVE-2026-28703 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report |
| CVE-2026-28756 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report |
| CVE-2026-28754 | ME Manageengine Exchange Reporter Plus Zohocorp | 4.8 | Apr 3 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report |
| CVE-2025-9435 | MA Manageengine Admanager Plus Zohocorp | 5.5 | Jan 13 | Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module |
| CVE-2025-11669 | MP Manageengine Pam360 Zohocorp | 8.1 | Jan 13 | Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue… |
| CVE-2025-9787 | MA Manageengine Applications Manager Zohocorp | 6.1 | Dec 18 | Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view |
| CVE-2025-11670 | MA Manageengine Admanager Plus Zohocorp | 4.3 | Dec 15 | Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as… |
| CVE-2025-7633 | ME Manageengine Exchange Reporter Plus Zohocorp | 6.1 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report |
| CVE-2025-7632 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report |
| CVE-2025-7430 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report |
| CVE-2025-7429 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Nov 11 | Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report |
| CVE-2025-5347 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Oct 30 | Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module |
| CVE-2025-5343 | ME Manageengine Exchange Reporter Plus Zohocorp | 5.4 | Oct 30 | Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option |
