Veille CVE

Recherche « Zohocorp ManageEngine Applications Manager »

6 CVE

Critique 1 Élevée 5 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Zohocorp ManageEngine Applications Manager » ✕
  1. CVE-2026-86708 10.0 Critique

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applications Manager installer, which could allow an unauthenticated attacker to impersonate the service account and access or modify associated cloud resources.

  2. CVE-2026-86683 8.1 Élevée

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings.

  3. CVE-2026-86681 7.6 Élevée

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to execute administrator-configured MBean actions on monitors outside their assigned scope.

  4. CVE-2026-86679 7.1 Élevée

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope.

  5. CVE-2026-86678 8.8 Élevée

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions.

  6. CVE-2026-86677 8.8 Élevée

    Zohocorp ManageEngine Applications Manager

    ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution.