6494 matches found
CVE-2018-20664
CVE-2018-20664 affects Zoho ManageEngine ADSelfService Plus 5.x prior to build 5701. The vulnerability is an XML External Entity (XXE) injection via an uploaded product license, enabling an attacker to exploit XXE conditions. Impact indicators from the records show high severity (CVSS3.0: 9.8, CR...
CVE-2019-3905
CVE-2019-3905 affects Zoho ManageEngine ADSelfService Plus 5.x prior to build 5703. The vulnerability is an SSRF issue in the product, enabling an attacker to trigger server-side requests via crafted input. Public references in the connected documents confirm the issue was fixed by Build 5703 (re...
PT-2019-10154
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions 5.x before build 5701 Description: The issue is related to an XML External Entity XXE vulnerability. This occurs when an uploaded product license is processed, allowing potential exploitation...
CVE-2019-3905: Server-Side Request Forgery (SSRF)
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...
CVE-2018-20664: Improper Restriction of XML External Entity Reference
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license...
ZOHO ManageEngine ADSelfService Plus Cross-Site Scripting Vulnerability (CNVD-2019-03298)
ZOHO ManageEngine ADSelfService Plus is a Web-based end-user password management software from ZOHO. A cross-site scripting vulnerability exists in the automatically updated deployment implementation of ZOHO ManageEngine ADSelfService Plus prior to version 5.7 build 5702, which can be exploited b...
CVE-2018-20484
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
Information disclosure
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20484
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20484
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 is affected by a Cross‑Site Scripting (XSS) vulnerability in the Employee Search feature. The issue originates from an XSS flaw in the employee search handling, enabling injection of arbitrary web script or HTML. Public sources (e.g., exp...
CVE-2018-20484
CVE-2018-20484 affects Zoho ManageEngine ADSelfService Plus 5.7 before build 5702, with a cross-site scripting vulnerability in the self-update layout implementation. The issue is a XSS in the auto-update/deployment flow (build
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
PT-2018-15407
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus version 5.7 before build 5702 Description The issue is related to a Cross-Site Scripting XSS flaw in the employee search feature. Recommendations For Zoho ManageEngine ADSelfService Plus version 5.7 before...
PT-2018-15406
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus version 5.7 before build 5702 Description The issue concerns an XSS in the self-update layout implementation. Recommendations For Zoho ManageEngine ADSelfService Plus version 5.7 before build 5702, update t...
CVE-2018-20484: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation...
CVE-2018-20485: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...