6460 matches found
PT-2021-21645
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6103 and prior Description The issue allows for admin portal access-restriction bypass. Recommendations For versions 6103 and prior, update to a version later than 6103 to resolve the issue...
PT-2021-20029
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions through 6102 Description The issue allows unauthenticated remote code execution in non-English editions. Recommendations For versions through 6102, update to a version that contains a fix for this...
ZOHO ManageEngine ADSelfService Plus 操作系统命令注入漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A remote code execution vulnerability exists in Zoho ManageEngine...
CVE-2021-37417: Improper Authentication
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...
PT-2021-21640
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6103 and prior Description The issue is related to reflected XSS on the loadframe page. Recommendations For Zoho ManageEngine ADSelfService Plus versions 6103 and prior, update to a version later...
CVE-2021-37416: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...
Zoho ManageEngine ADSelfService Plus 跨站脚本漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A reflected cross-site scripting vulnerability exists in the...
zoho manageengine adselfservice plus 授权问题漏洞
ZOHO zoho manageengine adselfservice plus is the United States zoho ZOHO company's set of Web-based end-user password management software . An input validation error vulnerability exists in Zoho ManageEngine ADSelfService Plus, which can be exploited by an attacker to cause a CAPTCHA bypass...
CVE-2021-33055: Improper Neutralization of Special Elements used in an OS Command
Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...
PT-2021-21641
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to 6103 Description The issue is related to CAPTCHA bypass due to improper parameter validation. Recommendations For versions prior to 6103, update to a version newer than 6103 to resolve the...
zoho manageengine adselfservice plus 数据伪造问题漏洞
ZOHO zoho manageengine adselfservice plus is a web-based end-user password management software from ZOHO. zoho ManageEngine ADSelfService Plus 6103 and earlier versions are vulnerable to an access control error that could be exploited by an attacker via the X The vulnerability can be exploited to...
CVE-2021-37421: Insufficient Verification of Data Authenticity
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...
CVE-2021-40177
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...
CVE-2021-40172
Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...
CVE-2021-40174
Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...
CVE-2021-40176
Zoho ManageEngine Log360 before Build 5225 allows stored XSS...
CVE-2021-40175
Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution...
CVE-2021-40178
Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...
