6457 matches found
CVE-2023-32783: Incorrect Authorization
The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and it's an expected behaviour."...
CVE-2023-38332
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...
CVE-2023-38332
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...
CVE-2023-38332
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...
CVE-2023-29505
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
CVE-2023-29505
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
Cross site scripting
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
ZOHO ManageEngine ADManager Plus Security Vulnerability
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...
ZOHO ManageEngine Network Configuration Manager Access Control Error Vulnerability
ZOHO ManageEngine Network Configuration Manager is a multi-vendor network change, configuration and compliance management nccm solution from ZOHO. It is designed to automate and fully control the entire lifecycle of device configuration management. A security vulnerability exists in ZOHO...
CVE-2023-29505
Zoho ManageEngine Network Configuration Manager 12.6.165 has a WebSocket endpoint vulnerability that enables Cross-site WebSocket hijacking. The connected documents consistently identify the affected product/version and the attack class, but do not provide concrete exploit details, affected confi...
CVE-2023-38332
Summary: Zoho ManageEngine ADManager Plus up to version 7.2 Build 7201 contains an unauthorized access vulnerability that could allow an authenticated user to take over another user’s account via sensitive information disclosure. Root cause / impact: improper access control enabling account takeo...
CVE-2023-29505
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
CVE-2023-38332
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...
PT-2023-22287 · Zoho · Zoho Manageengine Network Configuration Manager
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Network Configuration Manager version 12.6.165 Description: An issue was discovered in the WebSocket endpoint, allowing Cross-site WebSocket hijacking. Recommendations: For Zoho ManageEngine Network Configuration Manager...
PT-2023-26367 · Zoho · Zoho Manageengine Admanager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions through 7201 Description: The issue allows authenticated users to take over another user's account via sensitive information disclosure. This can potentially lead to unauthorized access and control of...
CVE-2023-29505
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
CVE-2023-29505: Origin Validation Error
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking...
CVE-2023-38332: Undefined Security Weakness
Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...
The vulnerability of the Windows Active Directory (AD) management and reporting software Zoho ManageEngine ADAudit Plus arises due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out XSS attacks.
The vulnerability of the Windows Active Directory AD management and reporting software Zoho ManageEngine ADAudit Plus exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
