Product by ManageEngine

    Applications Manager

    14 known vulnerabilities in Applications Manager (ManageEngine), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Applications Manager (ManageEngine)
    CriticalCVE-2016-9498

    ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects

    also in 1 other product

    		9.8
    CriticalCVE-2016-9488

    ManageEngine Applications Manager: SQL Injection

    		9.8
    MediumCVE-2024-5678

    SQL Injection

    also in 1 other product

    		4.7
    HighCVE-2016-9489

    ManageEngine Applications Manager: Improper Privilege Management

    also in 1 other product

    		8.8
    MediumCVE-2016-9491

    ManageEngine Applications Manager: Improper Restriction of XML External Entity Reference

    also in 1 other product

    		4.9
    HighCVE-2024-41140

    Improper Authorization

    also in 1 other product

    		8.1
    MediumCVE-2016-9490

    ManageEngine Applications Manager: Cross-site Scripting

    		6.1
    MediumCVE-2025-27930

    Stored XSS

    also in 1 other product

    		6.4
    Not ratedCVE-2008-0474

    ManageEngine Applications Manager: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2012-1062

    ManageEngine Applications Manager: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2008-0476

    ManageEngine Applications Manager: Information Disclosure

    		—
    Not ratedCVE-2008-0475

    ManageEngine Applications Manager: Information Disclosure

    		—
    Not ratedCVE-2012-1063

    ManageEngine Applications Manager: SQL Injection

    		—
    Not ratedCVE-2008-1566

    ManageEngine Applications Manager: Cross-Site Scripting (XSS)

    		—

    All products by ManageEngine