Zohocorp Manageengine Social It Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Zohocorp Manageengine Social It Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2014-7866 — CVSS 7.5 (high): Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT…
• CVE-2014-7867 — CVSS 7.5 (high): SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3…
• CVE-2014-7868 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow…
• CVE-2014-6036 — CVSS 6.4 (medium): Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and…
• CVE-2014-6034 — CVSS 5.0 (medium): Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine…