Cross site scripting

2021-08-3019:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

51.2%

JSON

Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.

CPENameOperatorVersion
manageengine_adselfservice_pluseq6.1 6100
manageengine_adselfservice_pluseq6.1 6103
manageengine_adselfservice_pluseq6.1
manageengine_adselfservice_pluslt6.1
manageengine_adselfservice_pluseq6.1 6101
manageengine_adselfservice_pluseq6.1 6102

Name	Operator	Version
manageengine_adselfservice_plus	eq	6.1 6100
manageengine_adselfservice_plus	eq	6.1 6103
manageengine_adselfservice_plus	eq	6.1
manageengine_adselfservice_plus	lt	6.1
manageengine_adselfservice_plus	eq	6.1 6101
manageengine_adselfservice_plus	eq	6.1 6102

References

blog.stmcyber.com/vulns/cve-2021-37416/

0.001 Low

EPSS

Percentile

51.2%

JSON

Related for PRION:CVE-2021-37416