CVE-2021-36772: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

CVE-2021-33911: Undefined Security Weakness

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

PT-2021-21347

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue is related to reflected XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2021-20362

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows remote code execution. Recommendations: For versions prior to 7110, update to version 7110 or later to resolve the issue...

PT-2021-21348

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue allows stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2021-11812

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7066 Description: The issue allows for XSS, which is a type of attack that can occur when an application takes user input and sends it to a web browser without proper validation or escaping...

CVE-2020-35594: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7066 allows XSS...

Zoho ManageEngine ADManager Plus, ADSelfService Plus and DesktopCentral Permission License and Access Control Issues Vulnerabilities

ZOHO ManageEngine ADSelfService Plus and others are products of ZOHO Corporation.ZOHO ManageEngine ADSelfService Plus is a Web-based end-user password management software.ZOHO ManageEngine ADManager ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software design...

CVE-2019-12876

Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System...

CVE-2019-12876: Incorrect Permission Assignment for Critical Resource

Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System...

CVE-2018-19374

Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...

PT-2019-9796

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.6 Build 6657 Description The issue allows local users to gain privileges after a reboot by placing a malicious file into a permissive directory. Recommendations For Zoho ManageEngine ADManager Plus...

CVE-2018-19374: Incorrect Permission Assignment for Critical Resource

Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...

CVE-2018-15608

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...

CVE-2018-15740

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen...

CVE-2018-15608

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...

PT-2018-13176

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.5.7 Description The issue concerns a problem with the "Workflow Delegation" "Requester Roles" screen, where there is an XSS issue. Recommendations For Zoho ManageEngine ADManager Plus version 6.5.7, a...

PT-2018-13115

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.5.7 Description The issue allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen. Recommendations For Zoho ManageEngine ADManager Plus version 6.5.7, consider restricting access t...

CVE-2018-15608: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...

CVE-2018-15740: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen...