ManageEngine
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ADAudit Plus | 35 | – | Jun 9, 2025 |
| Exchange Reporter Plus | 8 | – | Jun 26, 2025 |
| ADSelfService Plus | 5 | – | May 14, 2025 |
| OpManager | 5 | – | Jun 9, 2025 |
| EndPoint Central | 4 | – | Feb 5, 2025 |
| ServiceDesk Plus MSP | 4 | – | Aug 20, 2025 |
| Desktop Central | 3 | – | Nov 3, 2023 |
| ServiceDesk Plus | 3 | – | Aug 20, 2025 |
| Applications Manager | 3 | – | Jul 23, 2025 |
| SharePoint Manager Plus | 3 | – | Oct 30, 2026 |
| SupportCenter Plus | 3 | – | Aug 20, 2025 |
| PAM360 | 3 | – | Aug 28, 2024 |
| DDI Central | 2 | – | Jul 17, 2024 |
| ADManager Plus | 2 | – | Nov 8, 2024 |
| Asset Explorer | 2 | – | Aug 20, 2025 |
| Analytics Plus | 2 | – | Nov 27, 2024 |
| SupportCentre Plus | 1 | – | Mar 21, 2025 |
| OpManager, OpManager Plus, OpManager MSP, OpManager Enterprise Edition | 1 | – | Jul 17, 2024 |
| OpManager, Remote Monitoring and Management | 1 | – | Aug 23, 2024 |
| Password Manager Pro | 1 | – | Aug 28, 2024 |
| Service Desk Plus | 1 | – | Nov 15, 2023 |
| ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus | 1 | – | May 27, 2024 |
| Access Manager Plus | 1 | – | Nov 15, 2023 |
Exploited and recent CVEs
- CVE-2026-119682 Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus 0.3%
- CVE-2026-119680 Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature 0.2%
- CVE-2025-8309 User privilege escalation vulnerability 0.3%
- CVE-2025-8309 User privilege escalation vulnerability 0.3%
- CVE-2025-8309 User privilege escalation vulnerability 0.3%
- CVE-2025-8309 User privilege escalation vulnerability 0.3%
- CVE-2025-27930 Stored XSS 0.5%
- CVE-2025-5966 Stored XSS 1.3%
- CVE-2025-5366 Stored XSS 1.3%
- CVE-2025-41444 SQL Injection 1.7%
- CVE-2025-36528 SQL Injection 1.7%
- CVE-2025-27709 SQL Injection 1.7%
- CVE-2025-41437 Reflected XSS 0.3%
- CVE-2025-3835 Remote Code Execution 2.4%
- CVE-2025-41407 SQL Injection 1.5%
- CVE-2025-36527 SQL Injection 42.0%
- CVE-2025-41403 SQL Injection 1.8%
- CVE-2025-3836 SQL Injection 6.1%
- CVE-2025-3444 Local File Inclusion 1.6%
- CVE-2025-3444 Local File Inclusion 1.6%
- CVE-2025-3834 SQL Injection 1.7%
- CVE-2025-3833 SQL Injection 50.5%
- CVE-2024-50053 Stored XSS 1.1%
- CVE-2024-50053 Stored XSS 1.1%
- CVE-2024-50053 Stored XSS 1.1%
- CVE-2025-1723 Account takeover 1.5%
- CVE-2024-9097 IDOR 0.7%
- CVE-2024-41140 Improper Authorization 1.0%
- CVE-2024-52323 Sensitive Data Exposure 1.5%
- CVE-2024-49574 SQL Injection 3.6%