Threat database

93 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2025-49028Zoho ZeptoMail · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-12-31CVE Database V5CVE-2025-49028 Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail transmail allows Stored XSS.This issue affects Zoho ZeptoMail: from n/a through <= 3.3.1. EPSS 0.1%Vulnerability Zoho Mail	CVE Database V5	2025-12-31
Medium	6.1	EPSS 1.1%	CVE-2025-9787ManageEngine Applications Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.1EPSS 1.1%2025-12-18CVE Database V5CVE-2025-9787 Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view. EPSS 1.1%Vulnerability Zohocorp #cwe-79 United States+9	CVE Database V5	2025-12-18
Medium	6.4	EPSS 0.4%	CVE-2025-11670ManageEngine ADManager Plus · Exposure of Sensitive Information to an Unauthorized Actor Medium6.4EPSS 0.4%2025-12-15CVE Database V5CVE-2025-11670 Zohocorp ManageEngine ADManager Plus versions before 8025 are vulnerable to NTLM Hash Exposure. This vulnerability is exploitable only by technicians who have the “Impersonate as Admin” option enabled. EPSS 0.4%Vulnerability Zohocorp #cwe-200 Germany+9	CVE Database V5	2025-12-15
Medium	6.5	EPSS 0.5%	CVE-2025-9227ManageEngine OpManager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.5%2025-11-11CVE Database V5CVE-2025-9227 Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor. EPSS 0.5%Vulnerability Zohocorp #cwe-79 Germany+5	CVE Database V5	2025-11-11
High	8.8	EPSS 4.1%	CVE-2025-9223ManageEngine Applications Manager · Command Injection High8.8EPSS 4.1%2025-11-11CVE Database V5CVE-2025-9223 Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper configuration in the execute program action feature. EPSS 4.1%Vulnerability Zohocorp #cwe-77 United States+10	CVE Database V5	2025-11-11
Critical	9.8	EPSS 1.8%	CVE-2025-8324ManageEngine Analytics Plus · SQL Injection Critical9.8EPSS 1.8%2025-11-11CVE Database V5CVE-2025-8324 Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter configuration. EPSS 1.8%Vulnerability Zohocorp #cwe-89 United States+10	CVE Database V5	2025-11-11
High	7.3	EPSS 0.5%	CVE-2025-7633ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.3EPSS 0.5%2025-11-11CVE Database V5CVE-2025-7633 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Custom report. EPSS 0.5%Vulnerability Zohocorp #cwe-79 United States+9	CVE Database V5	2025-11-11
High	7.3	EPSS 0.5%	CVE-2025-7632ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.3EPSS 0.5%2025-11-11CVE Database V5CVE-2025-7632 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Public Folders report. EPSS 0.5%Vulnerability Zohocorp #cwe-79 United States+6	CVE Database V5	2025-11-11
High	7.3	EPSS 0.5%	CVE-2025-7430ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.3EPSS 0.5%2025-11-11CVE Database V5CVE-2025-7430 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Folder Message Count and Size report. EPSS 0.5%Vulnerability Zohocorp #cwe-79 United States+9	CVE Database V5	2025-11-11
High	7.3	EPSS 0.5%	CVE-2025-7429ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.3EPSS 0.5%2025-11-11CVE Database V5CVE-2025-7429 Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report. EPSS 0.5%Vulnerability Zohocorp #cwe-79 United States+9	CVE Database V5	2025-11-11
Medium	6.3	EPSS 0.5%	CVE-2025-5347ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.3EPSS 0.5%2025-10-30CVE Database V5CVE-2025-5347 Zohocorp ManageEngine Exchange Reporter Plus versions before 5723 are vulnerable to Stored Cross Site Scripting in the reports module. EPSS 0.5%Vulnerability Zohocorp #cwe-79 Germany+5	CVE Database V5	2025-10-30
Medium	6.3	EPSS 0.5%	CVE-2025-5343ManageEngine Exchange Reporter Plus · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.3EPSS 0.5%2025-10-30CVE Database V5CVE-2025-5343 Zohocorp ManageEngine Exchange Reporter Plus versions through 5721 are vulnerable to Stored Cross Site Scripting in the Instant Search option. EPSS 0.5%Vulnerability Zohocorp #cwe-79 Germany+4	CVE Database V5	2025-10-30
Medium	4.3	EPSS 1.1%	CVE-2025-5342ManageEngine Exchange Reporter Plus · Uncontrolled Resource Consumption Medium4.3EPSS 1.1%2025-10-30CVE Database V5CVE-2025-5342 Zohocorp ManageEngine Exchange Reporter Plus through 5721 are vulnerable to ReDOS vulnerability in the search module. EPSS 1.1%Vulnerability Zohocorp #cwe-400 Germany+5	CVE Database V5	2025-10-30
Low	3.2	EPSS 0.5%	CVE-2025-11248ManageEngine Endpoint Central · Insertion of Sensitive Information into Log File Low3.2EPSS 0.5%2025-10-27CVE Database V5CVE-2025-11248 ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token. EPSS 0.5%Vulnerability Zohocorp #cwe-532 Germany+5	CVE Database V5	2025-10-27
Medium	6.5	EPSS 1.0%	CVE-2025-6239ManageEngine Applications Manager · Exposure of Sensitive Information to an Unauthorized Actor Medium6.5EPSS 1.0%2025-10-21CVE Database V5CVE-2025-6239 Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor. EPSS 1.0%Vulnerability Zohocorp #cwe-200 Germany+6	CVE Database V5	2025-10-21
High	8.5	EPSS 4.5%	CVE-2025-10020ManageEngine ADManager Plus · Command Injection High8.5EPSS 4.5%2025-10-21CVE Database V5CVE-2025-10020 Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component. EPSS 4.5%Vulnerability Zohocorp #cwe-77 United States+9	CVE Database V5	2025-10-21
High	8.3	EPSS 27%	CVE-2025-9428Analytics Plus · SQL Injection High8.3EPSS 27%2025-10-21CVE Database V5CVE-2025-9428 Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api. EPSS 27%Vulnerability Zohocorp #cwe-89 United States+9	CVE Database V5	2025-10-21
Medium	5.2	EPSS 0.3%	CVE-2025-7473Endpoint Central · XML Injection (aka Blind XPath Injection) Medium5.2EPSS 0.3%2025-10-21CVE Database V5CVE-2025-7473 Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection. EPSS 0.3%Vulnerability Zohocorp #cwe-91 Germany+7	CVE Database V5	2025-10-21
Low	3.3	EPSS 0.3%	CVE-2025-5496Endpoint Central · Improper Privilege Management Low3.3EPSS 0.3%2025-10-21CVE Database V5CVE-2025-5496 ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected by an arbitrary file deletion vulnerability in the agent setup component. EPSS 0.3%Vulnerability Zohocorp #cwe-269 Germany+5	CVE Database V5	2025-10-21
Low	3.9	EPSS 0.3%	CVE-2025-5494Endpoint Central · Improper Privilege Management Low3.9EPSS 0.3%2025-09-25CVE Database V5CVE-2025-5494 ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13. EPSS 0.3%Vulnerability Zohocorp #cwe-269 Germany+7	CVE Database V5	2025-09-25

Showing 61–80 of 93 results