Sploitus

10 exploited vulnerabilities in Zoho Manageengine Eventlog Analyzer

Vulnerabilities with publicly known exploits

Vendors
Zoho, Manageengine
With known exploits
10
Affected Zohocorp Manageengine Eventlog Analyzer versions
< 12.1.1, 10.6, 8.2, 9.0, 9.9

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2019-19774 4 exploits
CVSS 8.8 HIGH 2019-12-13FIX AVAILABLE
ManageEngine EventLog Analyzer 10.0 - Information Disclosure VulnerabilityManageEngine EventLog Analyzer 10.0 - Information Disclosure
CVE-2015-7387 3 exploits
CVSS 7.5 HIGH 2015-09-28FIX AVAILABLE
ManageEngine EventLog Analyzer - Remote Code Execution (Metasploit)ManageEngine EventLog Analyzer Remote Code Execution
CVE-2014-6037 9 exploits
CVSS 7.5 HIGH 2014-10-26FIX AVAILABLE
ManageEngine Eventlog Analyzer Arbitrary File UploadManageEngine Eventlog Analyzer - Arbitrary File Upload (Metasploit)
CVE-2014-6043 1 exploit
CVSS 6.5 MEDIUM 2014-09-11FIX AVAILABLE
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)
CVE-2018-8721
CVSS 6.1 MEDIUM 2018-03-15FIX AVAILABLE
CVE-2017-11687
CVSS 6.1 MEDIUM 2017-07-27FIX AVAILABLE
CVE-2017-11686
CVSS 6.1 MEDIUM 2017-07-27
CVE-2017-11685
CVSS 6.1 MEDIUM 2017-07-27FIX AVAILABLE
CVE-2014-6039 8 exploits
CVSS 5.0 MEDIUM 2020-01-13FIX AVAILABLE
ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential DisclosureManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)
CVE-2014-5103
CVSS 4.3 MEDIUM 2014-07-25FIX AVAILABLE