6019 matches found
CVE-2026-3880: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report...
CVE-2026-28754: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report...
CVE-2026-28703: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report...
CVE-2026-4108: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report...
CVE-2026-4107: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report...
CVE-2026-28756: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report...
ZOHO ManageEngine Exchange reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a web-based Microsoft Exchange reporting, auditing, and monitoring software developed by ZOHO Corporation. Previous versions of ZOHO ManageEngine Exchange Reporter Plus, including version 5802, contained security vulnerabilities due to cross-site...
PT-2026-30027
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report...
PT-2026-30028
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report...
CVE-2026-27655: Improper Neutralization of Input During Web Page Generation
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report...
VulnCheck KEV: CVE-2022-28987
Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login...
CVE-2021-27214
A Server-side request forgery SSRF vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting XSS attack against the administrative interface via an HTTP...
CVE-2026-1367
Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option...
CVE-2026-1367
CVE-2026-1367 affects Zohocorp ManageEngine ADSelfService Plus versions 6522 and below. The issue is an authenticated SQL Injection in the search report option, caused by improper handling of input in that component (root cause as described). The vulnerability allows access to potentially sensiti...
CVE-2026-1367 SQL Injection
Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option...
ZOHO ManageEngine ADSelfService Plus 安全漏洞
ZOHO ManageEngine ADSelfService Plus is an integrated self-service password management and single-sign-on solution for Active Directory and cloud applications developed by ZOHO Corporation. ZOHO ManageEngine ADSelfService Plus versions 6522 and earlier contain a security vulnerability caused by a...
CVE-2026-1367: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option...
ManageEngine OpManager Stored XSS in Subnet Details (CVE-2025-9226)
The version of ManageEngine OpManager running on the remote web server is below 128465 / 128570 / 128582. It is, therefore, affected by a stored cross-site scripting XSS vulnerability in the subnet details functionality. An authenticated, low-privileged user with permission to modify subnet detai...