Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Filtered by product Manageengine Firewall Analyzer
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6105 3 Linux, Microsoft, Zohocorp 41 Linux Kernel, Windows, Manageengine Access Manager Plus and 38 more 2023-12-28 N/A 5.5 MEDIUM
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
CVE-2019-11676 1 Zohocorp 1 Manageengine Firewall Analyzer 2019-05-03 4.3 MEDIUM 6.1 MEDIUM
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.
CVE-2015-7780 1 Zohocorp 1 Manageengine Firewall Analyzer 2017-06-30 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.