6473 matches found
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
Cross site scripting
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
CVE-2021-31813 affects Zoho ManageEngine Applications Manager prior to 15130. The vulnerability is a Stored XSS flaw that occurs when importing malicious user details (e.g., a crafted user name) from Active Directory. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD entries) describe thi...
PT-2021-19521
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to 15130 Description The issue allows for Stored XSS attacks when importing malicious user details, such as a crafted user name, from Active Directory AD. This occurs due to improper handli...
CVE-2021-31813: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
Zoho ManageEngine ServiceDesk Plus MSP Server-Side Request Forgery Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...
Zoho ManageEngine ServiceDesk Plus MSP Improper Access Control Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An improper access control vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. An attacker could exploit the vulnerability to access internal data...
Zoho ManageEngine ServiceDesk Plus MSP Information Disclosure Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An information disclosure vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10522. No detailed vulnerability details are provided at this time...
CVE-2021-31531
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...
CVE-2021-31531
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...
CVE-2021-31160
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...
CVE-2021-31530
Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...
CVE-2021-31530
Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...
Server side request forgery (ssrf)
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...
Information disclosure
Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...