Vendor

    Zohocorp

    601 known vulnerabilities in products by Zohocorp, 9 of them actively exploited (CISA KEV).

    Key figures

    601

    Vulnerabilities

    9

    Actively exploited (KEV)

    2

    Used by ransomware

    150

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Zohocorp
    SeverityCVETitleCVSSPublished
    CriticalCVE-2022-47966

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2021-40539

    Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2022-35405

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2021-44515

    Zoho Desktop Central Authentication Bypass Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-10189

    Zoho ManageEngine Desktop Central File Upload Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2021-37415

    Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2021-44077

    Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2022-28810

    Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

    In CISA KEV

    		6.8
    CriticalCVE-2019-8394

    Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

    In CISA KEV

    		6.5
    CriticalCVE-2026-74849

    Remote code execution vulnerability

    		9.8
    HighCVE-2026-12269

    Authenticated File Write to RCE via keepalived in DDI Central

    		8.8
    HighCVE-2026-12268

    Authenticated PowerShell Injection leads to RCE

    		8.8
    CriticalCVE-2026-19599

    Remote Code Execution vulnerability

    		9.9
    CriticalCVE-2026-6516

    Remote Code Execution

    		10.0
    HighCVE-2026-76978

    Command Injection vulnerability

    		8.8
    CriticalCVE-2026-12571

    Authentication Bypass Leading to Account Takeover

    		9.8
    CriticalCVE-2023-23076

    Zoho ManageEngine SupportCenter Plus: OS Command Injection

    		9.8
    CriticalCVE-2022-40300

    Zohocorp ManageEngine Password Manager Pro: SQL Injection

    		9.8
    HighCVE-2025-9428

    SQL Injection

    		8.3
    CriticalCVE-2022-47523

    Zohocorp ManageEngine Access Manager Plus: SQL Injection

    		9.8
    CriticalCVE-2022-43671

    Zohocorp ManageEngine Password Manager Pro: SQL Injection

    		9.8
    HighCVE-2026-12267

    Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE

    		7.2
    CriticalCVE-2022-43672

    Zohocorp ManageEngine Password Manager Pro: SQL Injection

    		9.8
    CriticalCVE-2022-29535

    Zohocorp ManageEngine OpManager: SQL Injection

    		9.8
    CriticalCVE-2022-28219

    ManageEngine ADAudit Plus: XML External Entity (XXE)

    		9.8

    All vulnerabilities in search

    News

    Products

    Products by Zohocorp
    ProductCVEsActively exploited
    Zohocorp ManageEngine OpManager690
    Zohocorp ManageEngine Applications Manager650
    Zohocorp ManageEngine ADSelfService Plus583
    Zohocorp ManageEngine ADManager Plus561
    ManageEngine ADAudit Plus541
    Zoho ManageEngine504
    Zoho Desktop Central482
    Zohocorp ManageEngine Exchange Reporter Plus430
    Zoho Corp ManageEngine SupportCenter Plus312
    Zohocorp ManageEngine NetFlow Analyzer300
    Zohocorp ManageEngine Password Manager Pro272
    Manageengine Servicedesk Plus Msp262
    Zoho Corp ManageEngine AssetExplorer261
    Zohocorp ManageEngine EventLog Analyzer200
    Zohocorp ManageEngine Firewall Analyzer190
    Zohocorp ManageEngine PAM360192
    Zohocorp ManageEngine Network Configuration Manager160
    Manageengine Remote Access Plus141
    Zohocorp ManageEngine Endpoint Central140
    Zohocorp ManageEngine Access Manager Plus132
    Zohocorp ManageEngine Log360120
    Manageengine It36090
    Zohocorp ManageEngine DataSecurity Plus90
    Zohocorp ManageEngine OpUtils90
    Zohocorp ManageEngine Analytics Plus81
    Manageengine Opmanager Msp60
    Manageengine Opmanager Plus60
    Zohocorp ManageEngine M365 Manager Plus60
    Ddi Central50
    Manageengine Cloud Security Plus50
    Manageengine Sharepoint Manager Plus50
    Manageengine Social It Plus50
    Zoho Corp ManageEngine Key Manager Plus51
    ZohoCorp ManageEngine ServiceDesk Plus50
    Manageengine Application Control Plus41
    Manageengine Device Control Plus41
    Webnms Framework40
    Zohocorp ManageEngine RecoveryManager Plus40
    Endpoint Central30
    Manageengine Ad36031
    Manageengine Ddi Central30
    Manageengine Mobile Device Manager Plus30
    Manageengine O365 Manager Plus30
    Manageengine Patch Connect Plus30
    Zoho Corp ManageEngine Browser Security Plus31
    Zohocorp ManageEngine M365 Security Plus30
    Zoho Corp ManageEngine Patch Manager Plus31
    Zoho Corp ManageEngine Vulnerability Manager Plus31