GCVE - cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_it360:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zohocorp (`4f1ab088-ab0e-54ac-b0dc-2304879a7502`)
Product	Manageengine It360 (`ec17be04-5432-5608-8d94-41d328fa5034`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-7863`	vulnerable	2026-06-08 05:06:00.299284	Details available The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to (1) read arbitrary files via the fileName parameter in a copyfile operation or (2) obtain sensitive information via a directory listing in a listdirectory operation to servlet/FailOverHelperServlet. Published: 2020-02-08T16:57:37.000Z Updated: 2024-08-06T13:03:27.280Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt http://www.securityfocus.com/archive/1/archive/1/534575/100/0/threaded http://seclists.org/fulldisclosure/2015/Jan/114 https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerabilities-in-failoverhelperservlet	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6036`	vulnerable	2026-06-08 05:05:56.112500	Details available Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and IT360 10.3, 10.4, and earlier allows remote attackers or remote authenticated users to delete arbitrary files via a .. (dot dot) in the fileName parameter. Published: 2014-12-04T17:00:00.000Z Updated: 2024-08-06T12:03:02.352Z Open on db.gcve.eu Reference links https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt http://seclists.org/fulldisclosure/2014/Sep/110	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6034`	vulnerable	2026-06-08 05:05:56.103738	Details available Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files via a .. (dot dot) in the regionID parameter. Published: 2014-12-04T17:00:00.000Z Updated: 2024-08-06T12:03:02.341Z Open on db.gcve.eu Reference links https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt http://seclists.org/fulldisclosure/2014/Sep/110	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.