6470 matches found
CVE-2021-37422
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases...
CVE-2021-37422
CVE-2021-37422 affects Zoho ManageEngine ADSelfService Plus 6111 and earlier. Connected sources specify a SQL injection vulnerability when linking to a database in ADSelfService Plus. The available documents do not provide specifics on affected DBs, exact vulnerable component paths, root cause de...
CVE-2021-37423
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...
CVE-2021-37423
Technical details are not publicly available in the provided documents for CVE-2021-37423; specifics on affected versions, root cause, or mitigations are not disclosed here. Monitor for updates from official advisories.
CVE-2021-37414
Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication...
CVE-2021-37414
CVE-2021-37414 affects Zoho ManageEngine DesktopCentral prior to 10.0.709. The issue is an authorization flaw that allows retrieving a valid user’s APIKEY without authentication, per NVD/Red Hat.cnvd entries and vendor pages. Impact is authenticated user credential exposure; no explicit exploitat...
CVE-2021-37414: Improper Authentication
Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication...
PT-2021-21647
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6111 and prior Description The issue allows for linked applications takeover. Recommendations For versions 6111 and prior, update to a version later than 6111 to resolve the issue...
Zoho ManageEngine DesktopCentral授权问题漏洞
ZOHO ManageEngine DesktopCentral is used by ZOHO for cloud-scale monitoring to reduce complexity.ZOHO ManageEngine DesktopCentral suffers from an authorization issue vulnerability that could be exploited by attackers to obtain APIKEY of valid users without authentication...
CVE-2021-37423: Undefined Security Weakness
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover...
PT-2021-21646
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6111 and prior Description The issue is related to SQL Injection that occurs while linking databases. Recommendations For versions 6111 and prior, update to a version later than 6111 to resolve the...
CVE-2021-37422: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases...
PT-2021-21639
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine DesktopCentral versions prior to 10.0.709 Zoho ManageEngine DesktopCentral versions prior to 10.1.2119.8 Description The issue allows anyone to obtain a valid user's APIKEY without authentication. This affects Zoho ManageEngi...
ZOHO ManageEngine ADSelfService Plus 安全漏洞
ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. versions have a security vulnerability that stems from the vulnerability of the system to takeover by linked applications. Detailed...
Zoho ManageEngine Password Manager Zero-Day Gets Fix
A critical security vulnerability in the Zoho ManageEngine ADSelfService Plus platform could allow remote attackers to bypass authentication and have free rein across users’ Active Directory AD and cloud accounts. The issue CVE-2021-40539 has been actively exploited in the wild as a zero-day,...
CISA Warns of Actively Exploited Zoho ManageEngine ADSelfService Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday issued a bulletin warning of a zero-day flaw affecting Zoho ManageEngine ADSelfService Plus deployments that is currently being actively exploited in the wild. The flaw, tracked as CVE-2021-40539, concerns a REST API...
ManageEngine ADManager Plus < 7111 RCE
Binary data manageengineadmanagerplus7111rce.nbin...
ZOHO ManageEngine ADSelfService Plus Authorization Issues Vulnerability
ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. An authorization issue vulnerability exists in Zoho ManageEngine ADSelfService Plus version 6113 and earlier versions, which can be...
ManageEngine ADSelfService Plus < build 6114 REST API Authentication Bypass
According to its self-reported version, the ManageEngine ADSelfService Plus application running on the remote host is prior to build 6114. It is, therefore, affected by an authentication bypass vulnerability affecting REST API URLs. An unauthenticated, remote attacker can exploit this to bypass...
