Veille CVE

Recherche « zohocorp manageengine_adaudit_plus »

2 CVE

  1. CVE-2026-6516 10.0 Critique

    Zohocorp ManageEngine ADAudit Plus

    Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code execution due to the vulnerable agent API.

  2. CVE-2026-11374 9.0 Critique

    zohocorp manageengine_adselfservice_plus · zohocorp manageengine_recovery_manager_plus · zohocorp manageengine_m365_manager_plus · zohocorp manageengine_adaudit_plus

    In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.