CVEs we hold for Manageengine

Records whose assigning authority named Manageengine as the affected vendor. Newest identifiers first, capped at 200.

CVE-2025-8309User privilege escalation vulnerabilityManageEngine SupportCenter Plus

CVE-2025-5966Stored XSSManageEngine Exchange Reporter Plus

CVE-2025-5366Stored XSSManageEngine Exchange Reporter Plus

CVE-2025-41444SQL InjectionManageEngine ADAudit Plus

CVE-2025-41437Reflected XSSManageEngine OpManager

CVE-2025-41407SQL InjectionManageEngine ADAudit Plus

CVE-2025-41403SQL InjectionManageEngine ADAudit Plus

CVE-2025-3836SQL InjectionManageEngine ADAudit Plus

CVE-2025-3835Remote Code ExecutionManageEngine Exchange Reporter Plus

CVE-2025-3834SQL InjectionManageEngine ADAudit Plus

CVE-2025-3833SQL InjectionManageEngine ADSelfService Plus

CVE-2025-36528SQL InjectionManageEngine ADAudit Plus

CVE-2025-36527SQL InjectionManageEngine ADAudit Plus

CVE-2025-3444Local File InclusionManageEngine SupportCenter Plus

CVE-2025-27930Stored XSSManageEngine Applications Manager

CVE-2025-27709SQL InjectionManageEngine ADAudit Plus

CVE-2025-1723Account takeoverManageEngine ADSelfService Plus

CVE-2024-9459SQL InjectionManageEngine Exchange Reporter Plus

CVE-2024-9100Local File InclusionManageEngine Analytics Plus

CVE-2024-9097IDORManageEngine Endpoint Central

CVE-2024-6748SQL InjectionManageEngine OpManager

CVE-2024-6204SQL injectionManageEngine Exchange Reporter Plus

CVE-2024-5678SQL InjectionManageEngine Applications Manager

CVE-2024-5608SQL InjectionManageEngine ADAudit Plus

CVE-2024-5586SQL InjectionManageEngine ADAudit Plus

CVE-2024-5556SQL InjectionManageEngine ADAudit Plus

CVE-2024-5546SQL InjectionManageEngine PAM360

CVE-2024-5527SQL InjectionManageEngine ADAudit Plus

CVE-2024-5490SQL InjectionManageEngine ADAudit Plus

CVE-2024-5487SQL InjectionManageEngine ADAudit Plus

CVE-2024-5471Agent takeoverManageEngine DDI Central

CVE-2024-5467SQL InjectionManageEngine ADAudit Plus

CVE-2024-5466Remote Code ExecutionManageEngine OpManager, Remote Monitoring and Management

CVE-2024-52323Sensitive Data ExposureManageEngine Analytics Plus

CVE-2024-50053Stored XSSManageEngine SupportCentre Plus

CVE-2024-49574SQL InjectionManageEngine ADAudit Plus

CVE-2024-48878SQL InjectionManageEngine ADManager Plus

CVE-2024-41150Stored XSSManageEngine SupportCenter Plus

CVE-2024-41140Improper AuthorizationManageEngine Applications Manager

CVE-2024-38872SQL InjectionManageEngine Exchange Reporter Plus

CVE-2024-38871SQL InjectionManageEngine Exchange Reporter Plus

CVE-2024-38870Stored XSSManageEngine OpManager, OpManager Plus, OpManager MSP…

CVE-2024-38869Incorrect AuthorizationManageEngine Endpoint Central

CVE-2024-38868Incorrect AuthorizationManageEngine Endpoint Central

CVE-2024-36518SQL InjectionManageEngine ADAudit Plus

CVE-2024-36517SQL InjectionManageEngine ADAudit Plus

CVE-2024-36516SQL InjectionManageEngine ADAudit Plus

CVE-2024-36515SQL InjectionManageEngine ADAudit Plus

CVE-2024-36514SQL InjectionManageEngine ADAudit Plus

CVE-2024-36485SQL InjectionManageEngine ADAudit Plus

CVE-2024-36038Stored XSSManageEngine OpManager

CVE-2024-36037Insufficient Access Control VulnerabilityManageEngine ADAudit Plus

CVE-2024-36036Insufficient Access Control VulnerabilityManageEngine ADAudit Plus

CVE-2024-36035SQL InjectionManageEngine ADAudit Plus

CVE-2024-36034SQL InjectionManageEngine ADAudit Plus

CVE-2024-27314Stored XSS VulnerabilityManageEngine ServiceDesk Plus, ServiceDesk Plus MSP…

CVE-2024-27313XSS VulnerabilityManageEngine PAM360

CVE-2024-27312Authorization vulnerability in PAM360ManageEngine PAM360

CVE-2024-27311Arbitrary file writingManageEngine DDI Central

CVE-2024-27310DOS VulnerabilityManageEngine ADSelfService Plus

CVE-2024-24409Privilege EscalationManageEngine ADManager Plus

CVE-2024-21791SQL Injection in ADAudit PlusManageEngine ADAudit Plus

CVE-2024-21775SQL InjectionManageEngine Exchange Reporter Plus

CVE-2024-10839XML External EntityManageEngine SharePoint Manager Plus

CVE-2024-10203Agent Arbitrary File DeletionManageEngine EndPoint Central

CVE-2024-0269SQL InjectionManageEngine ADAudit Plus

CVE-2024-0253SQL InjectionManageEngine ADAudit Plus

CVE-2024-0252Remote code executionManageEngine ADSelfService Plus

CVE-2023-6105ManageEngine Information Disclosure in Multiple ProductsManageEngine Access Manager Plus

CVE-2023-49335no title heldManageEngine ADAudit Plus

CVE-2023-49334no title heldManageEngine ADAudit Plus

CVE-2023-49333no title heldManageEngine ADAudit Plus

CVE-2023-49332no title heldManageEngine ADAudit Plus

CVE-2023-49331no title heldManageEngine ADAudit Plus

CVE-2023-49330no title heldManageEngine ADAudit Plus

CVE-2023-4769Server-Side Request Forgery in ManageEngine Desktop CentralManageEngine Desktop Central

CVE-2023-4768Improper Neutralization of CRLF Sequences in ManageEngine Desktop CentralManageEngine Desktop Central

CVE-2023-4767Improper Neutralization of CRLF Sequences in ManageEngine Desktop CentralManageEngine Desktop Central

CVE-2023-47211no title heldManageEngine OpManager

CVE-2023-35719ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass…ManageEngine ADSelfService Plus

CVE-2022-43473no title heldManageEngine OpManager

CVE-2022-23050no title heldn/a ManageEngine AppManager15

CVE-2021-20148no title heldn/a ManageEngine ADSelfService Plus

CVE-2021-20147no title heldn/a ManageEngine ADSelfService Plus

CVE-2021-20136no title heldn/a ManageEngine Log360

CVE-2021-20131no title heldn/a ManageEngine ADManager Plus Build 7111

CVE-2021-20130no title heldn/a ManageEngine ADManager Plus Build 7111

CVE-2021-20081no title heldn/a ManageEngine ServiceDesk Plus

CVE-2021-20080no title heldn/a ManageEngine AssetExplorer

CVE-2016-9498ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objectsManageEngine Applications Manager

CVE-2016-9491ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML…ManageEngine Applications Manager

CVE-2016-9490ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerabilityManageEngine Applications Manager

CVE-2016-9489ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypassManageEngine Applications Manager

CVE-2016-9488ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilitiesManageEngine Applications Manager

94 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.