Veille CVE

Recherche « Zohocorp ManageEngine RecoveryManager Plus »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Zohocorp ManageEngine RecoveryManager Plus » ✕
  1. CVE-2026-11374 9.0 Critique

    zohocorp manageengine_adselfservice_plus · zohocorp manageengine_recovery_manager_plus · zohocorp manageengine_m365_manager_plus · zohocorp manageengine_adaudit_plus

    In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

  2. CVE-2026-2740 8.4 Élevée

    Zohocorp ManageEngine ADSelfService Plus · Zohocorp ManageEngine DataSecurity Plus · Zohocorp ManageEngine RecoveryManager Plus

    Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus before 6313 are vulnerable to Authenticated Remote code execution in the agent machines due to the bug in the 3rd party dependency.