RSS   Vulnerabilities for 'Manageengine firewall analyzer'   RSS

2019-05-02
 
CVE-2019-11678

CWE-89
 

 
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection.

 
 
CVE-2019-11677

CWE-611
 

 
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity (XXE) Injection.

 
 
CVE-2019-11676

CWE-79
 

 
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.

 
2017-09-04
 
CVE-2017-14123

 

 
Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp.

 
2017-06-27
 
CVE-2015-7781

 

 
ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.

 
 
CVE-2015-7780

 

 
Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

 

 >>> Vendor: Zohocorp 26 Products
Webnms
Manageengine adselfservice plus
Manageengine admanager plus
Manageengine assetexplorer
Manageengine opstor
Manageengine eventlog analyzer
Manageengine desktop central
Manageengine it360
Manageengine netflow analyzer
Manageengine it plus
Manageengine opmanager
Manageengine social it plus
Manageengine supportcenter plus
Servicedesk plus
Manageengine password manager pro
Webnms framework
Password manager pro
Manageengine firewall analyzer
Site24x7 mobile network poller
Manageengine applications manager
Manageengine recovery manager plus
Manageengine servicedesk plus
Firewall analyzer
Network configuration manager
Opmanager
Oputils


Copyright 2019, cxsecurity.com

 

Back to Top