Cross-Site Request Forgery

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote attackers to hijack the authentication of administrators fo…CVE-2014-9331Zohocorp · 4.6% likely

   CWE-352

2. Zoho ManageEngine ADSelfService Plus 5.x through 5803 has CSRF on the users' profile information page. Users who are attacked with this vulnerability will be forced to modify thei…CVE-2019-18411Zohocorp · 2.3% likely

   CWE-352

3. Zoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site Request Forgery (CSRF) attacks, as demonstrated by changing a user's role.CVE-2020-9346Zohocorp · 2.2% likely

   CWE-352

4. /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protecti…CVE-2017-17552Zohocorp · 2.0% likely

   CWE-352

5. Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators.CVE-2015-2961Zohocorp · 2.0% likely

   CWE-352

6. Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500).CVE-2016-1161Zohocorp · 1.2% likely

   CWE-352

7. Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings.CVE-2021-40174Zohocorp · 1.0% likely

   CWE-352

8. Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.CVE-2021-40173Zohocorp · 1.0% likely

   CWE-352

9. Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings.CVE-2021-40172Zohocorp · 1.0% likely

   CWE-352

10. The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF.CVE-2019-15645Zoho · 0.7% likely

    CWE-352

11. Cross-site Request ForgeryCVE-2026-8174Zohocorp · CVSS 5.7 · 0.4% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.