Manageengine Recovery Manager Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_recovery_manager_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Recovery Manager Plus (dc0fe977-8489-5257-badb-df3d2bf1f511) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11374 |
vulnerable | 2026-07-29 00:23:31.013878 |
Account Takeover via Predictable SSO Ticket Generation
CRITICAL (9)
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted
by an unauthenticated user, leading to account takeover.
Published: 2026-06-23T08:19:30.638Z
Updated: 2026-06-24T15:48:27.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9163 |
vulnerable | 2026-06-08 05:12:07.902630 |
Details available
A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.
Published: 2018-04-02T12:00:00.000Z
Updated: 2024-08-05T07:17:51.507Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.