PT-2021-13788

Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the Personalization interface...

CVE-2021-41075: Improper Neutralization of Special Elements used in an SQL Command

The NetFlow Analyzer in Zoho ManageEngine OpManger before 125455 is vulnerable to SQL Injection in the Attacks Module API...

CVE-2021-40493: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

PT-2021-13787

Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the PasswordExpiry interface...

CVE-2021-20131: Unrestricted Upload of File with Dangerous Type

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...

CVE-2021-20130: Unrestricted Upload of File with Dangerous Type

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...

ZOHO ManageEngine ADManager Plus 代码问题漏洞

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus Build 7111, which stems from not properly validating file uploads in the Personalization interface and ca...

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...

PT-2021-22899

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 125437 Description The issue concerns a SQL Injection vulnerability in the support diagnostics module. This occurs via the pollingObject parameter of the "getDataCollectionFailureReason API"...

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78727)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78734)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78735)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78732)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78729)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78728)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78730)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78733)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to file uploads, which can be exploited by attackers to cause remo...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78731)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

Zoho ManageEngine ADManager Plus code issue vulnerability

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day management tasks, such as bulk management of user accounts...