ZOHO ManageEngine Log360 Input Validation Error Vulnerability

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.An input validation error vulnerability exists in ZOHO ManageEngine Log360, which stems from the product’s failure to securely inspect the content of uploaded files. An attacker could upload a malicious file and cause code execution through this vulnerability.