Browse all 86 CVE security advisories affecting ManageEngine. AI-powered Chinese analysis, POCs, and references for each vulnerability.
ManageEngine provides enterprise IT management solutions, including asset management, network monitoring, and identity governance tools. With 86 recorded CVEs, the vendor’s software has historically been susceptible to critical vulnerabilities, particularly remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws. These security issues often stem from insufficient input validation and improper access controls within its web-based interfaces and backend services. Notable incidents include the 2024 supply chain compromise affecting the OpManager product, where attackers exploited unpatched vulnerabilities to deploy malware across customer environments. This breach highlighted systemic weaknesses in patch management and secure coding practices. While the company releases regular updates to address these gaps, the high volume of past exploits underscores persistent challenges in maintaining robust security postures across its diverse portfolio of IT administration utilities.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-5966 | Stored XSS — Exchange Reporter Plus CWE-79 | 8.1 | High | 2025-06-26 |
| CVE-2025-5366 | Stored XSS — Exchange Reporter Plus CWE-79 | 8.1 | High | 2025-06-26 |
| CVE-2025-3835 | Remote Code Execution — Exchange Reporter Plus CWE-434 | 9.6 | Critical | 2025-06-09 |
| CVE-2024-9459 | SQL Injection — Exchange Reporter Plus CWE-89 | 8.3 | High | 2024-11-05 |
| CVE-2024-6204 | SQL injection — Exchange Reporter Plus CWE-89 | 8.3 | High | 2024-08-30 |
| CVE-2024-38872 | SQL Injection — Exchange Reporter Plus CWE-89 | 8.3 | High | 2024-07-26 |
| CVE-2024-38871 | SQL Injection — Exchange Reporter Plus CWE-89 | 8.3 | High | 2024-07-26 |
| CVE-2024-21775 | SQL Injection — Exchange Reporter Plus CWE-89 | 8.3 | High | 2024-02-16 |
This page lists every published CVE security advisory associated with ManageEngine. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.