Zohocorp Manageengine Applications Manager
9 CVEs affecting Zohocorp Manageengine Applications Manager. Latest disclosed: 2026-09-23. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-86708 | Critical | 10.0 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Google Cloud service-account private key in the Applicati… |
CVE-2026-86678 | High | 8.8 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform a… |
CVE-2026-86677 | High | 8.8 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining admini… |
CVE-2025-9223 | High | 8.8 | 2025-11-11 | Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection vulnerability due to the improper config… |
CVE-2026-86683 | High | 8.1 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings. |
CVE-2026-86681 | High | 7.6 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to a permissions validation issue that allowed low-privileged users to exe… |
CVE-2026-86679 | High | 7.1 | 2026-09-23 | ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to de… |
CVE-2025-6239 | Medium | 6.5 | 2025-10-21 | Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor. |
CVE-2025-9787 | Medium | 6.1 | 2025-12-18 | Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC view. |