6470 matches found
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
Code injection
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
Authentication flaw
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-28960
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
Spoofing
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
Command injection
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
Server side request forgery (ssrf)
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37741
CVE-2021-37741 affects Zoho/ManageEngine ADManager Plus prior to version 7111. The documented issue is a pre-authentication remote code execution vulnerability, allowing an attacker to run code without valid login. NVD data assigns CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low c...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37419
Summary: CVE-2021-37419 affects Zoho ManageEngine ADSelfService Plus prior to 6112 and is described as a server-side request forgery (SSRF) vulnerability. Affected product/version: Zoho ManageEngine ADSelfService Plus
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus is affected by a mail spoofing vulnerability in versions prior to 6112. The connected sources consistently reference ADSelfService Plus before 6112 as vulnerable, with remediation implied by version 6112 (hotfix/update). No deeper technical root cause or explo...