ManageEngine Applications Manager vulnerabilities

8 published CVEs name ManageEngine Applications Manager among the affected products.

Critical 2High 2Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2025-27930
Stored XSS
ManageEngine · Applications Manager
Medium6.4
CVE-2024-41140
Improper Authorization
ManageEngine · Applications Manager
High8.1
CVE-2024-5678
SQL Injection
ManageEngine · Applications Manager
Medium4.7
CVE-2016-9498
ManageEngine Applications Manager 12 and 13, allows unserialization of unsafe Java objects
ManageEngine · Applications Manager
Critical9.8
CVE-2016-9491
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation due to improper restriction of an XML external entity
ManageEngine · Applications Manager
Medium4.9
CVE-2016-9489
ManageEngine Applications Manager 12 and 13 is vulnerable to privilege escalation and authentication bypass
ManageEngine · Applications Manager
High8.8
CVE-2016-9490
ManageEngine Applications Manager versions 12 and 13 suffer from a Reflected Cross-Site Scripting vulnerability
ManageEngine · Applications Manager
Medium6.1
CVE-2016-9488
ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities
ManageEngine · Applications Manager
Critical9.8