CVE-2021-27956

2021-05-2017:55:22

mitre

www.cve.org

zoho manageengine

adselfservice plus

xss vulnerability

user search page

e-mail address field

EPSS

0.002

Percentile

51.4%

JSON

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.

References

pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes

raxis.com/blog/cve-2021-27956-manage-engine-xss

www.manageengine.com

EPSS

0.002

Percentile

51.4%

JSON

Related for CVELIST:CVE-2021-27956