8.2

CVE-2026-3324

Authentication Bypass

Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13000
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13001
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13003
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13005
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13006
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13008
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13011
Zohocorp ≫ Manageengine Log360 Version 13.0 Update build13013
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.26% 0.668
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
0fc0942c-577d-436f-ae8e-945763c79b02 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE-288 Authentication Bypass Using an Alternate Path or Channel

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

https://www.manageengine.com/log-management/advisory/CVE-2026-3324.html
Patch
Vendor Advisory