Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability

Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...

ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60537)

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

ZOHO ManageEngine AssetExplorer 安全漏洞

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO USA. The software provides asset tracking, scanning of IT assets and asset ownership tracking. A security vulnerability exists in ZOHO ManageEngine AssetExplorer Agent version 1.0.34, which originates when the progr...

PT-2021-3766

Name of the Vulnerable Software and Affected Versions ManageEngine AssetExplorer affected versions not specified Description The issue is related to the Asset Explorer agent not validating HTTPS certificates, allowing an attacker on the network to send a NEWSCAN request to a listening agent and...

CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-36772

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

CVE-2021-33911

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2021-33911

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-33911

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

Remote code execution

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

Cross site scripting

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

CVE-2021-36772

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

Cross site scripting

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-33911

CVE-2021-33911 affects Zoho ManageEngine ADManager Plus prior to build 7110, which enables remote code execution. The issue is confirmed across multiple feeds (NVD entry and Red Hat CVE page) with a high-severity impact (CVSS v3.1 base score 9.8; network, no authentication, user interaction not r...

CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-36771

Zoho ManageEngine ADManager Plus prior to version 7110 is affected by a reflected XSS vulnerability. The issue arises in the web interface where user-supplied input reflected in responses can be interpreted by a victim’s browser, potentially enabling session or credential theft if an attacker ent...

CVE-2021-36772

CVE-2021-36772 affects Zoho ManageEngine ADManager Plus up to version 7110, which is vulnerable to a stored cross-site scripting (XSS) flaw. The available connected sources confirm the affected product and the vulnerable version range (before 7110) and describe the impact as stored XSS. The CVSS ...

ZOHO ManageEngine ADManager Plus 代码注入漏洞

Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...