CVE-2021-40174

Zoho ManageEngine Log360 is affected by a CSRF vulnerability prior to Build 5224. The issue stems from insufficient validation of requests from trusted users, allowing an attacker to disable logon security settings. Reported CVSS scores indicate high impact (CVSS 3.1: base score 8.8, vector CVSS:...

CVE-2021-40175

Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution...

CVE-2021-40176

CVE-2021-40176 affects Zoho ManageEngine Log360 prior to Build 5225, with a stored XSS vulnerability caused by insufficient input validation in the web interface. Exploitation could lead to execution of client-side code within authenticated sessions on affected instances. Public references indica...

CVE-2021-40176

Zoho ManageEngine Log360 before Build 5225 allows stored XSS...

CVE-2021-40178

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

CVE-2021-40178

Zoho ManageEngine Log360 is affected: before Build 5224, a stored XSS exists via the LOGO_PATH field in logon settings. Root cause cited as failure to validate client-side data in LOGO_PATH. Mitigation: upgrade to Build 5224 or later (per the CVE entry). Exploitation status not specified in the p...

CVE-2021-40174: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings...

PT-2021-22830

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5219 Description The issue allows a CSRF attack on proxy settings. Recommendations For versions prior to Build 5219, update to Build 5219 or later to resolve the issue...

CVE-2021-40178: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGOPATH key value in the logon settings...

PT-2021-22831

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Cloud Security Plus versions prior to Build 4117 Description The issue allows a CSRF attack on the server proxy settings. Recommendations For versions prior to Build 4117, update to Build 4117 or later to resolve the issue. A...

PT-2021-22834

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5225 Description The issue allows stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where th...

ZOHO ManageEngine Log360 跨站请求伪造漏洞

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A cross-site...

PT-2021-22833

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5219 Description The issue allows unrestricted file upload, which can result in remote code execution. Recommendations For versions prior to Build 5219, update to Build 5219 or later to resolve...

ZOHO ManageEngine Log360 跨站脚本漏洞

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. A cross-site scripting vulnerability exists in ZOHO ManageEngine Log360, which stems from the product's failure to validate user data. An attacker could execute client-side...

PT-2021-22832

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Log360 versions prior to Build 5224 Description The issue allows a CSRF attack for disabling the logon security settings. Recommendations For versions prior to Build 5224, update to Build 5224 or later to resolve the issue. A...

CVE-2021-40173: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings...

CVE-2021-40172: Cross-Site Request Forgery (CSRF)

Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings...

CVE-2021-40177: Undefined Security Weakness

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite...

ZOHO ManageEngine Log360 代码问题漏洞

ZzOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.A code issue...

CVE-2021-40175: Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution...