Manageengine Assetexplorer vulnerabilities | LiveThreat CVE Feed

Product

Manageengine Assetexplorer

by Zohocorp · last CVE Nov 15, 2023

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities26 In the news0 Timeline

Severity mix

Critical 3High 8Medium 12Low 0

Severity

All severities26 Critical3 High8 Medium12 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Manageengine Assetexplorer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-26600	6.5	6%	Mar 6	ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via… Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +32 more
CVE-2022-40772	6.5	3%	Nov 23	Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +25 more
CVE-2020-8838	6.4	2%	Mar 23	An issue was discovered in Zoho ManageEngine AssetExplorer 6.5 Affected: 6.5
CVE-2023-23075	6.1	3%	Feb 1	Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation Affected: 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +32 more
CVE-2019-12597	6.1	2%	Jul 11	An issue was discovered in Zoho ManageEngine AssetExplorer Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5
CVE-2019-12596	6.1	2%	Jul 11	An issue was discovered in Zoho ManageEngine AssetExplorer Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5
CVE-2019-12595	6.1	2%	Jul 11	An issue was discovered in Zoho ManageEngine AssetExplorer Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5
CVE-2019-12537	6.1	2%	Jul 11	An issue was discovered in Zoho ManageEngine AssetExplorer Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5
CVE-2018-17596	6.1	2%	Oct 2	In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter Affected: 6.2.0
CVE-2023-6105	5.5	1%	Nov 15	ManageEngine Information Disclosure in Multiple Products Affected: before 7.0; 7.0; 7.0; 7.0; 7.0; 7.0
CVE-2023-29443	4.9	3%	Apr 26	Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to… Affected: 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +3 more
CVE-2022-40771	4.9	4%	Nov 23	Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure Affected: before 6.9; 6.9; 6.9; 6.9; 6.9; 6.9; +25 more