Zoho ManageEngine OpManager Remote Code Execution Vulnerability (CNVD-2021-30701)

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

CVE-2021-3287

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

CVE-2021-3287

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

CVE-2021-3287

Zoho ManageEngine OpManager versions prior to 12.5.329 are vulnerable to unauthenticated Remote Code Execution (RCE) . The root cause is a general bypass in the deserialization class , specifically affecting an HTTP endpoint used by the Smart Update Manager component. An attacker can leverage thi...

PT-2021-19972

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.5.329 Description The issue allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. Recommendations For versions prior to 12.5.329, update to version...

CVE-2021-3287: Deserialization of Untrusted Data

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class...

Zoho ManageEngine OpManager code-related vulnerabilities

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

ManageEngine ServiceDesk Plus < 11.2 Build 11200 Unauthenticated Stored XSS

A stored cross-site scripting XSS vulnerability exists in the XML processing logic of asset discovery. By sending a crafted HTTP POST request to /discoveryServlet/WsDiscoveryServlet, a remote, unauthenticated attacker can create an asset containing malicious JavaScript. When an administrator view...

ManageEngine AssentExplorer < 6.8 Unauthenticated Stored XSS

A stored cross-site scripting XSS vulnerability exists in the XML processing logic of asset discovery. By sending a crafted HTTP POST request to /discoveryServlet/WsDiscoveryServlet, a remote, unauthenticated attacker can create an asset containing malicious JavaScript. When an administrator view...

CVE-2021-20080

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...

CVE-2021-20080

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...

Cross site scripting

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...

CVE-2021-20080

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...

CVE-2021-20080

CVE-2021-20080 affects Zoho ManageEngine ServiceDesk Plus (before 11200) and AssetExplorer (before 6800). Root cause: insufficient output sanitization during XML asset processing. Impact: remote, unauthenticated attacker can trigger stored XSS by uploading a crafted XML asset file; XSS persists w...

CVE-2021-20080: Improper Neutralization of Input During Web Page Generation

Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks by uploading a crafted XML asset file...

PT-2021-13758

Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions prior to 11200 ManageEngine AssetExplorer versions prior to 6800 Description: The issue is related to insufficient output sanitization, which allows a remote, unauthenticated attacker to conduct persiste...

Zoho Corporation Manage Engine OpManager Path Traversal Vulnerability

Zoho Corporation ManageEngine OpManager is an application from Zoho Corporation, India. Continuously monitors the network and provides in-depth visibility and control over it. A path traversal vulnerability exists in Zoho Corporation Manage Engine OpManager, which can be exploited by an attacker ...

ManageEngine OpManager Smart Update Manager RCE

Binary data manageengineopmanagercve-2020-28653.nbin...

Zoho Corporation's Manage Engine OpManager has a path traversal vulnerability

Zoho Corporation ManageEngine OpManager is an application from Zoho Corporation, India. Continuously monitors the network and provides in-depth visibility and control over it. A path traversal vulnerability exists in Zoho Corporation Manage Engine OpManager, which can be exploited by an attacker ...

Zoho ManageEngine Desktop Central Code Execution Vulnerability (CNVD-2021-28712)

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...