Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Zohocorp Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-12265`Missing Authorization on HA Failover Config allows Complete Data Destruction	Exploitation statusNot known exploited	FixYes	Affected productDDI Central	Published09/28/2026	SeverityHigh
`CVE-2026-12264`Authenticated File Write via HA Failover Config Upload leads to RCE	Exploitation statusNot known exploited	FixYes	Affected productDDI Central	Published09/28/2026	SeverityHigh
`CVE-2026-12267`Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE	Exploitation statusNot known exploited	FixYes	Affected productDDI Central	Published09/28/2026	SeverityHigh
`CVE-2026-12268`Authenticated PowerShell Injection leads to RCE	Exploitation statusNot known exploited	FixYes	Affected productDDI Central	Published09/28/2026	SeverityHigh
`CVE-2026-12269`Authenticated File Write to RCE via keepalived in DDI Central	Exploitation statusNot known exploited	FixYes	Affected productDDI Central	Published09/28/2026	SeverityHigh
`CVE-2026-92905`Denial of Service Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine EventLog Analyzer	Published09/24/2026	SeverityMedium
`CVE-2026-86678`Broken Authentication vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityHigh
`CVE-2026-86677`Broken Authentication vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityHigh
`CVE-2026-86679`Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityHigh
`CVE-2026-86683`Broken Authentication Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityHigh
`CVE-2026-86681`Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityHigh
`CVE-2026-86708`Sensitive data exposure	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published09/23/2026	SeverityCritical
`CVE-2026-19599`Remote Code Execution vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityCritical
`CVE-2026-75825`Authentication Bypass vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-76978`Command Injection vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-76979`XML Injection vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-76980`Data Exposure vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-84787`Privilege Escalation vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-84789`Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-84791`Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-15358`Path Traversal Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-14913`SQL Injection vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-12370`Remote Code Execution Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published09/23/2026	SeverityHigh
`CVE-2026-75791`Authentication bypass vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published09/22/2026	SeverityHigh
`CVE-2026-74849`Remote code execution vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published09/22/2026	SeverityCritical
`CVE-2026-18912`	Exploitation statusNot known exploited	FixYes	Affected productManageEngine DataSecurity Plus	Published09/18/2026	SeverityHigh
`CVE-2026-18911`	Exploitation statusNot known exploited	FixYes	Affected productManageEngine DataSecurity Plus	Published09/18/2026	SeverityHigh
`CVE-2026-77697`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published09/07/2026	SeverityMedium
`CVE-2026-85640`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published09/07/2026	SeverityMedium
`CVE-2026-77699`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published09/07/2026	SeverityMedium
`CVE-2026-77698`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published09/07/2026	SeverityMedium
`CVE-2026-14828`	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Password Manager Pro	Published09/02/2026	SeverityHigh
`CVE-2026-12263`Authentication Bypass	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Password Manager Pro	Published08/13/2026	SeverityHigh
`CVE-2026-11840`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Password Manager Pro	Published08/13/2026	SeverityHigh
`CVE-2026-12571`Authentication Bypass Leading to Account Takeover	Exploitation statusNot known exploited	FixYes	Affected productmanageengine_ddi_central	Published08/11/2026	SeverityCritical
`CVE-2026-16053`Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productManageEngine M365 Manager Plus	Published08/11/2026	SeverityHigh
`CVE-2026-6516`Remote Code Execution	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADAudit Plus	Published07/23/2026	SeverityCritical
`CVE-2026-3183`Multi Factor Auth Bypass	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published07/21/2026	SeverityHigh
`CVE-2026-3182`Sensitive Data Exposure	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published07/21/2026	SeverityMedium
`CVE-2026-11374`Account Takeover via Predictable SSO Ticket Generation	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published06/23/2026	SeverityCritical
`CVE-2026-8174`Cross-site Request Forgery	Exploitation statusNot known exploited	FixYes	Affected productZoho Mail wordpress plugin	Published05/26/2026	SeverityMedium
`CVE-2026-2740`Remote Code Execution	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published05/21/2026	SeverityHigh
`CVE-2026-3324`Authentication Bypass	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Log360	Published04/16/2026	SeverityHigh
`CVE-2026-5785`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine PAM360	Published04/16/2026	SeverityHigh
`CVE-2026-27655`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-4108`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-4107`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-3880`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-3879`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-28703`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-28756`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-28754`Stored XSS Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published04/03/2026	SeverityHigh
`CVE-2026-1367`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published02/23/2026	SeverityHigh
`CVE-2025-9226`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published01/30/2026	SeverityMedium
`CVE-2025-11669`Broken Access Control	Exploitation statusNot known exploited	FixYes	Affected productManageEngine PAM360	Published01/13/2026	SeverityHigh
`CVE-2025-11250`Authentication Bypass	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADSelfService Plus	Published01/13/2026	SeverityCritical
`CVE-2025-9435`Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADManager Plus	Published01/13/2026	SeverityMedium
`CVE-2025-9787`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published12/18/2025	SeverityMedium
`CVE-2025-11670`NTLM Hash Exposure Vulnerability	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADManager Plus	Published12/15/2025	SeverityMedium
`CVE-2025-9227`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine OpManager	Published11/11/2025	SeverityMedium
`CVE-2025-9223`Command Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published11/11/2025	SeverityHigh
`CVE-2025-8324`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Analytics Plus	Published11/11/2025	SeverityCritical
`CVE-2025-7633`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published11/11/2025	SeverityHigh
`CVE-2025-7632`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published11/11/2025	SeverityHigh
`CVE-2025-7430`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published11/11/2025	SeverityHigh
`CVE-2025-7429`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published11/11/2025	SeverityHigh
`CVE-2025-5347`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published10/30/2025	SeverityMedium
`CVE-2025-5343`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published10/30/2025	SeverityMedium
`CVE-2025-5342`Denial of Service (DoS)	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Exchange Reporter Plus	Published10/30/2025	SeverityMedium
`CVE-2025-11248`Sensitive Information Logged	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Endpoint Central	Published10/27/2025	SeverityLow
`CVE-2025-6239`Information disclosure	Exploitation statusNot known exploited	FixYes	Affected productManageEngine Applications Manager	Published10/21/2025	SeverityMedium
`CVE-2025-10020`Command Injection	Exploitation statusNot known exploited	FixYes	Affected productManageEngine ADManager Plus	Published10/21/2025	SeverityHigh
`CVE-2025-9428`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productAnalytics Plus	Published10/21/2025	SeverityHigh
`CVE-2025-7473`XML Injection	Exploitation statusNot known exploited	FixYes	Affected productEndpoint Central	Published10/21/2025	SeverityMedium
`CVE-2025-5496`Arbitrary File Deletion	Exploitation statusNot known exploited	FixYes	Affected productEndpoint Central	Published10/21/2025	SeverityLow
`CVE-2025-5494`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productEndpoint Central	Published09/25/2025	SeverityLow
`CVE-2025-27930`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productApplications Manager	Published07/23/2025	SeverityMedium
`CVE-2025-5966`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productExchange Reporter Plus	Published06/26/2025	SeverityHigh
`CVE-2025-5366`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productExchange Reporter Plus	Published06/26/2025	SeverityHigh
`CVE-2025-41444`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published06/09/2025	SeverityHigh
`CVE-2025-36528`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published06/09/2025	SeverityHigh
`CVE-2025-27709`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published06/09/2025	SeverityHigh
`CVE-2025-3835`Remote Code Execution	Exploitation statusNot known exploited	FixYes	Affected productExchange Reporter Plus	Published06/09/2025	SeverityCritical
`CVE-2025-41407`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published05/23/2025	SeverityHigh
`CVE-2025-36527`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published05/23/2025	SeverityHigh
`CVE-2025-41403`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published05/22/2025	SeverityHigh
`CVE-2025-3836`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published05/22/2025	SeverityHigh
`CVE-2025-3444`Local File Inclusion	Exploitation statusNot known exploited	FixYes	Affected productServiceDesk Plus MSP	Published05/22/2025	SeverityMedium
`CVE-2025-3834`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published05/14/2025	SeverityHigh
`CVE-2025-3833`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADSelfService Plus	Published05/14/2025	SeverityHigh
`CVE-2024-50053`Stored XSS	Exploitation statusNot known exploited	FixYes	Affected productServiceDesk Plus	Published03/21/2025	SeverityMedium
`CVE-2025-1724`Account Takeover	Exploitation statusNot known exploited	FixYes	Affected productAnalytics Plus	Published03/17/2025	SeverityHigh
`CVE-2025-1723`Account takeover	Exploitation statusNot known exploited	FixYes	Affected productADSelfService Plus	Published03/03/2025	SeverityHigh
`CVE-2024-9097`IDOR	Exploitation statusNot known exploited	FixYes	Affected productEndpoint Central	Published02/05/2025	SeverityLow
`CVE-2024-41140`Improper Authorization	Exploitation statusNot known exploited	FixYes	Affected productApplications Manager	Published01/29/2025	SeverityHigh
`CVE-2024-52323`Sensitive Data Exposure	Exploitation statusNot known exploited	FixYes	Affected productAnalytics Plus	Published11/27/2024	SeverityHigh
`CVE-2024-49574`SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productADAudit Plus	Published11/18/2024	SeverityHigh
`CVE-2024-10839`XML External Entity	Exploitation statusNot known exploited	FixYes	Affected productSharePoint Manager Plus	Published11/08/2024	SeverityHigh
`CVE-2024-24409`Privilege Escalation	Exploitation statusNot known exploited	FixYes	Affected productADManager Plus	Published11/08/2024	SeverityHigh
`CVE-2024-10203`Agent Arbitrary File Deletion	Exploitation statusNot known exploited	FixYes	Affected productEndpoint Central	Published11/07/2024	SeverityHigh