CVE-2024-27313

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

CVE-2024-27313

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

CVE-2024-27313 XSS Vulnerability

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

CVE-2024-27313 XSS Vulnerability

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

CVE-2024-27313

Zoho ManageEngine PAM360 (v6610) is affected by a Stored XSS vulnerability (CVE-2024-27313). The issue is documented across multiple feeds with the vulnerability described as a stored XSS affecting version 6610; no exploit details or patch/mitigation are provided in the connected documents. The r...

Zoho ManageEngine PAM360 安全漏洞

ZOHO ManageEngine PAM360 is a complete PAM software from ZOHO, Inc. that provides complete privileged access security for your IT infrastructure. A security vulnerability exists in Zoho ManageEngine PAM360 version 6610, which stems from the presence of a stored cross-site scripting XSS...

PT-2024-21815

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine PAM360 version 6610 Description The issue is related to a Stored XSS vulnerability. Recommendations For Zoho ManageEngine PAM360 version 6610, at the moment, there is no information about a newer version that contains a fix f...

CVE-2024-27313: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine PAM360 is vulnerable to Stored XSS vulnerability. This vulnerability is applicable only in the version 6610...

ZOHO ManageEngine ADAudit Plus Security Bypass Vulnerability

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. A security bypass vulnerability exists in ZOHO ManageEngine ADAudit Plus versions prior to 7270, which can be exploited by an attacker to modify agent configuration...

ZOHO ManageEngine ADAudit Plus Access Control Error Vulnerability

ZOHO ManageEngine ADAudit Plus is ZOHO's solution for simplifying audits, proving compliance and detecting threats. An access control error vulnerability exists in ZOHO ManageEngine ADAudit Plus, which can be exploited by an attacker to view session logs...

CVE-2024-36037

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings...

CVE-2024-27310

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input...

CVE-2024-27310

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input...

CVE-2024-36037

Zoho ManageEngine ADAudit Plus (Windows AD management tool) is affected by CVE-2024-36037 due to an insufficient access control flaw. Versions 7260 and below expose session recordings to unauthorized local agent machine users. The root cause is improper access control, enabling viewing of other u...

CVE-2024-36037 Insufficient Access Control Vulnerability

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to view the session recordings...

CVE-2024-36036 Insufficient Access Control Vulnerability

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration...

CVE-2024-36036 Insufficient Access Control Vulnerability

Zoho ManageEngine ADAudit Plus versions 7260 and below allows unauthorized local agent machine users to access sensitive information and modifying the agent configuration...

CVE-2024-36036

Zoho ManageEngine ADAudit Plus is affected by an insufficient access control vulnerability in versions 7260 and below, allowing unauthorized local agent-machine users to access sensitive information and modify the agent configuration. The issue is described as a security bypass/information-disclo...

CVE-2024-27310 DOS Vulnerability

Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input...

CVE-2024-27310

CVE-2024-27310 affects Zoho ManageEngine ADSelfService Plus prior to version 6401. The vulnerability arises from malicious LDAP input causing a denial-of-service condition, impacting availability (per CVE metrics). Connected sources corroborate that versions below 6401 are vulnerable; no explicit...