Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how manageengine compares to other vendors in security performance

View Risk Score →

Software

manageengine applications manager
10
manageengine opmanager
5
manageengine servicedesk plus
5
manageengine desktop central
3
manageengine eventlog analyzer
3
manageengine firewall analyzer
3
manageengine it360
3
manageengine m365 manager plus
3
manageengine oputils
3
manageengine passwordmanager pro
3
manageengine adaudit plus
2
manageengine analytics plus
2
manageengine assetexplorer agent
2
manageengine opmanager msp
2
manageengine password manager pro
2
manageengine supportcenter plus
2
manageengine admanager plus
1
manageengine adselfservice plus
1
manageengine device expert
1
manageengine manageengine pam360
1
manageengine manageengine password manager pro
1
manageengine netflow analyzer
1
manageengine password manager pro6.1
1
manageengine recoverymanager plus
1
manageengine servicedesk
1
manageengine unified endpoint management suite
1

ManageEngine ADSelfService PlusAccount Takeover via Predictable SSO Ticket Generation

Risk 78
Severity
9
First published (updated )
CVE-2026-11374

ManageEngine ManageEngine PAM360SQL Injection

Risk 43
Severity
8.1
EPSS
0.02%
First published (updated )
CVE-2026-5785

ManageEngine Endpoint CentralIDOR

Risk 22
Severity
4.3
First published (updated )
CVE-2024-9097

ManageEngine Analytics PlusManageEngine Analytics Plus getOAToken Exposed Dangerous Method Privilege Escalation Vulnerability

Risk 23
First published (updated )
Advisory
ZDI-24-1676

ManageEngine Analytics PlusZDI-24-1676: ManageEngine Analytics Plus getOAToken Exposed Dangerous Method Privilege Escalation Vulnerability

Risk 23
First published (updated )
ZDI-CAN-25135
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine Recovery Manager PlusManageEngine Recovery Manager Plus getEscapedValue Command Injection Remote Code Execution Vulnerability

Risk 45
First published (updated )
Advisory
ZDI-23-1719

ManageEngine Recovery Manager PlusZDI-23-1719: ManageEngine Recovery Manager Plus getEscapedValue Command Injection Remote Code Execution Vulnerability

Risk 45
First published (updated )
ZDI-CAN-21173

ManageEngine Applications ManagerManageEngine Applications Manager SingleSignOn Cross-Site Scripting Remote Code Execution Vulnerability

Risk 61
First published (updated )
Advisory
ZDI-23-1715

ManageEngine Applications ManagerZDI-23-1715: ManageEngine Applications Manager SingleSignOn Cross-Site Scripting Remote Code Execution Vulnerability

Risk 61
First published (updated )
ZDI-CAN-21226

ManageEngine ADManager PlusManageEngine ADManager Plus installServiceWithCredentials Command Injection Remote Code Execution Vulnerability

Risk 45
First published (updated )
Advisory
ZDI-23-1488
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine ADManager PlusZDI-23-1488: ManageEngine ADManager Plus installServiceWithCredentials Command Injection Remote Code Execution Vulnerability

Risk 45
First published (updated )
ZDI-CAN-21010

ManageEngine ADManager PlusManageEngine ADManager Plus download Directory Traversal Information Disclosure Vulnerability

Risk 31
First published (updated )
Advisory
ZDI-23-1401

ManageEngine ADManager PlusZDI-23-1401: ManageEngine ADManager Plus download Directory Traversal Information Disclosure Vulnerability

Risk 31
First published (updated )
ZDI-CAN-21184

ZohoCorp ManageEngine ADSelfService Plus(0Day) ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

Risk 63
Severity
6.8
First published (updated )
CVE-2023-35719

ManageEngine ADSelfService PlusZDI-23-891: (0Day) ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

Risk 62
Severity
6.8
First published (updated )
ZDI-CAN-17009
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine ADSelfService Plus(0Day) ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability

Risk 62
Severity
6.8
First published (updated )
Advisory
ZDI-23-891

ManageEngine ADSelfService PlusManageEngine ADSelfService Plus DomainUserSSPLogonAuth Improper Input Validation Denial-of-Service Vulnerability

Risk 43
First published (updated )
Advisory
ZDI-23-437

ManageEngine ADSelfService PlusZDI-23-437: ManageEngine ADSelfService Plus DomainUserSSPLogonAuth Improper Input Validation Denial-of-Service Vulnerability

Risk 43
First published (updated )
ZDI-CAN-20008

ManageEngine ADManager PlusManageEngine ADManager Plus ChangePasswordAction Command Injection Remote Code Execution Vulnerability

Risk 51
First published (updated )
Advisory
ZDI-23-438

ManageEngine ADManager PlusZDI-23-438: ManageEngine ADManager Plus ChangePasswordAction Command Injection Remote Code Execution Vulnerability

Risk 51
First published (updated )
ZDI-CAN-20033
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine ServiceDesk Plus MSPManageEngine ServiceDesk Plus MSP generateSQLReport Improper Input Validation Privilege Escalation Vulnerability

Risk 37
First published (updated )
Advisory
ZDI-23-229

ManageEngine ServiceDesk Plus MSPZDI-23-229: ManageEngine ServiceDesk Plus MSP generateSQLReport Improper Input Validation Privilege Escalation Vulnerability

Risk 37
First published (updated )
ZDI-CAN-19536

ManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus ImageUploadServlet Improper Input Validation Denial-of-Service Vulnerability

Risk 31
First published (updated )
Advisory
ZDI-23-230

ManageEngine ServiceDesk PlusZDI-23-230: ManageEngine ServiceDesk Plus ImageUploadServlet Improper Input Validation Denial-of-Service Vulnerability

Risk 31
First published (updated )
ZDI-CAN-19537

ManageEngine OpManagerXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2020-19554
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine Desktop CentralCommand Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2021-28960

ZohoCorp ManageEngine OpManagerManageEngine OpManager OpmSkipFilter Directory Traversal Information Disclosure Vulnerability

Risk 44
Severity
7.5
First published (updated )
CVE-2020-13818

ManageEngine ADManager PlusXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2018-15608

ManageEngine Applications ManagerManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities

Risk 86
Severity
9.8
First published (updated )
CVE-2016-9488

ManageEngine Applications ManagerManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability

Risk 38
Severity
6.1
First published (updated )
CVE-2016-9490
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203