CVE-2021-40177: Undefined Security Weakness

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

PT-2021-22831

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Cloud Security Plus versions prior to Build 4117 Description The issue allows a CSRF attack on the server proxy settings. Recommendations For versions prior to Build 4117, update to Build 4117 or later to resolve the issue. A...

PT-2021-22836

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5224 Description The issue allows stored XSS via the LOGO PATH key value in the logon settings. This can potentially lead to malicious script execution when a user accesses the affected logon...

PT-2021-22835

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5225 Description The issue allows remote code execution via BCP file overwrite. Recommendations For versions prior to Build 5225, update to Build 5225 or later to resolve the issue...

PT-2021-22834

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5225 Description The issue allows stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where th...

PT-2021-22830

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5219 Description The issue allows a CSRF attack on proxy settings. Recommendations For versions prior to Build 5219, update to Build 5219 or later to resolve the issue...

PT-2021-22832

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5224 Description The issue allows a CSRF attack for disabling the logon security settings. Recommendations For versions prior to Build 5224, update to Build 5224 or later to resolve the issue. A...

CVE-2021-40173: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

CVE-2021-40174: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

CVE-2021-40175: Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution...

CVE-2021-40172: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

CVE-2021-40176: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Log360 before Build 5225 allows stored XSS...

CVE-2021-40178: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

ZOHO ManageEngine Log360 code-related vulnerabilities

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.An input...

ZOHO ManageEngine Log360 code-related vulnerabilities

ZzOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A code issue...

ZOHO ManageEngine Log360 has a vulnerability related to cross-site request forgeing.

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A cross-site...

ZOHO ManageEngine Log360 Cross-site Scripting Vulnerability

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. A cross-site scripting vulnerability exists in ZOHO ManageEngine Log360, which stems from the product's failure to validate user data. An attacker could execute client-side...

PT-2021-13760

Name of the Vulnerable Software and Affected Versions: ManageEngine Asset Explorer Agent versions prior to the fixed version Description: The issue is related to an integer overflow that can lead to remote code execution. Recommendations: At the moment, there is no information about a newer versi...

Zoho ManageEngine Applications Manager URL monitor SQL Injection

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input when processing the request in URL monitor module...

CVE-2021-33256

A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The jusername parameter seems to be vulnerable and a reverse shell could be obtained if a privileged user exports "User Attempts Audit Repor...