6457 matches found
CVE-2021-43296: Server-Side Request Forgery (SSRF)
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...
CVE-2021-42099: Unrestricted Upload of File with Dangerous Type
Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution...
CVE-2021-43295: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...
Zoho ManageEngine SupportCenter Plus 跨站脚本漏洞
ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. A cross-site scripting vulnerability exists in ZOHO ManageEngine SupportCenter Plus, which stems from the product's failure to validate user identities and could be exploited by attackers to obtain a...
PT-2021-23526
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine M365 Manager Plus versions prior to 4421 Description The issue concerns a file-upload remote code execution problem. Recommendations For versions prior to 4421, update to version 4421 or later to resolve the issue...
Zoho ManageEngine SupportCenter Plus 跨站脚本漏洞
ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. used to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process.A cross-site...
ZOHO ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...
PT-2021-23807
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to Reflected XSS in the Accounts module. Recommendations For versions prior to 11016, update to version 11016 or later to resolve the issue...
PT-2021-23809
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager versions prior to 125488 Description The issue is related to command injection due to improper validation in the Ping functionality. This allows for potential exploitation. No information is...
CVE-2021-43294: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...
Zoho ManageEngine M365 Manager Plus 4421 代码问题漏洞
ZOHO ManageEngine M365 Manager Plus is an extensive Microsoft 365 tool from ZOHO, Inc. It is used to report, manage, monitor, audit and create alerts for critical activities.A file upload vulnerability exists in versions prior to ZOHO ManageEngine M365 Manager Plus 4421, which stems from the lack...
PT-2021-23806
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to Reflected XSS in the Products module. Recommendations For versions prior to 11016, update to version 11016 or later to resolve the issue...
CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...
CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...
CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...
CVE-2021-44077
CVE-2021-44077 affects Zoho ManageEngine ServiceDesk Plus prior to 11306, ServiceDesk Plus MSP prior to 10530, and SupportCenter Plus prior to 11014. The issue enables unauthenticated remote code execution via /RestAPI servlet endpoints and ImportTechnicians in Struts configuration. Evidence in t...
CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...
CVE-2021-44077: Missing Authentication for Critical Function
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration...
