ManageEngine ADManager Plus

• CVE-2017-16847 ↗EPSS 17%CRITICAL 9.82017

  Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.

• CVE-2017-16846 ↗EPSS 17%CRITICAL 9.82017

  Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter.

• CVE-2017-11512 ↗EPSS 80%HIGH 7.52017

  The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticate…

• …and 97 more · see all on the vendor page →

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• Lumeus Autonomous JIT Access · Lumeus
• Lumos Autonomous Identity Platform · Lumos
• Magic · Magic
• ManageEngine AD360 · ManageEngine
• ManageEngine Identity360 · ManageEngine
• Memority Identity Factory 360° · Memority
• Messageware NavGuard · Messageware
• Messageware OWA Guard · Messageware