CVE-2021-37422

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases...

CVE-2021-37423

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

CVE-2021-37423

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

PT-2021-21647

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6111 and prior Description The issue allows for linked applications takeover. Recommendations For versions 6111 and prior, update to a version later than 6111 to resolve the issue...

PT-2021-21646

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6111 and prior Description The issue is related to SQL Injection that occurs while linking databases. Recommendations For versions 6111 and prior, update to a version later than 6111 to resolve the...

CVE-2021-37422: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases...

CVE-2021-37423: Undefined Security Weakness

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...

ManageEngine ADSelfService Plus < build 6114 REST API Authentication Bypass

According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6114. It is, therefore, affected by an authentication bypass vulnerability affecting REST API URLs. An unauthenticated, remote attacker can exploit this to bypass...

CVE-2021-40539

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution...

CVE-2021-40539: Use of Incorrectly-Resolved Name or Reference

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution...

ZOHO ManageEngine ADSelfService Plus Remote Code Execution Vulnerability (CNVD-2021-88249)

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A remote code execution vulnerability exists in Zoho ManageEngine...

CVE-2021-37421

Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...

CVE-2021-37417

Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...

CVE-2021-37416

Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...

CVE-2021-37417

Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...

PT-2021-21641

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6103 Description The issue is related to CAPTCHA bypass due to improper parameter validation. Recommendations For versions prior to 6103, update to a version newer than 6103 to resolve the...

PT-2021-20029

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions through 6102 Description The issue allows unauthenticated remote code execution in non-English editions. Recommendations For versions through 6102, update to a version that contains a fix for this...

PT-2021-21640

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6103 and prior Description The issue is related to reflected XSS on the loadframe page. Recommendations For Zoho ManageEngine ADSelfService Plus versions 6103 and prior, update to a version later...

CVE-2021-37421: Insufficient Verification of Data Authenticity

Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...

CVE-2021-37416: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...