CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
Zoho (ManageEngine) has 685 CVEs, 9 exploited. Pick a weakness or a product to list them.
By weakness
- Cross-site Scripting158
- SQL Injection117
- File and Path Handling82 · 1 exploited
- Access Control63
- Authentication58 · 3 exploited
- Command and Code Injection29
- Injection and Smuggling24
- Input Validation and Logic23 · 2 exploited
- Information Disclosure20
- Cryptography16
- Cross-Site Request Forgery11
- Server-Side Request Forgery10
- Memory Corruption7
- Deserialization and Object Injection5 · 2 exploited
- Insecure Direct Object Reference5
- Denial of Service4
- Misconfiguration and Insecure Design1
- Other weaknesses1
- Open Redirect1
- No weakness recorded50 · 1 exploited
By product
- Manageengine Opmanager59
- Manageengine Applications Manager56
- Manageengine Adselfservice Plus46
- Manageengine Admanager Plus44
- Manageengine Desktop Central41
- ManageEngine ServiceDesk Plus39
- ADAudit Plus38
- DDI Central19
- Manageengine Netflow Analyzer19
- Manageengine Eventlog Analyzer17
- Manageengine Exchange Reporter Plus17
- Servicedesk Plus17
- Manageengine Password Manager Pro16
- Applications Manager14
- Manageengine Assetexplorer14
- Manageengine Supportcenter Plus13
- Manageengine Adaudit Plus11
- Manageengine Remote Access Plus11
- ManageEngine Key Manager Plus10
- Exchange Reporter Plus8
- ManageEngine Log3608
- Manageengine Servicedesk Plus Msp8
- Desktop Central7 · 1 exploited
- Endpoint Central7
- OpManager7
- Firewall Analyzer6
- ManageEngine6 · 6 exploited
- ManageEngine Endpoint Central6
- Manageengine Firewall Analyzer6
- ADSelfService Plus5
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.