Cross site scripting

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

Remote code execution

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2021-33911

CVE-2021-33911 affects Zoho ManageEngine ADManager Plus prior to build 7110, which enables remote code execution. The issue is confirmed across multiple feeds (NVD entry and Red Hat CVE page) with a high-severity impact (CVSS v3.1 base score 9.8; network, no authentication, user interaction not r...

CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-36771

Zoho ManageEngine ADManager Plus prior to version 7110 is affected by a reflected XSS vulnerability. The issue arises in the web interface where user-supplied input reflected in responses can be interpreted by a victim’s browser, potentially enabling session or credential theft if an attacker ent...

CVE-2021-36772

CVE-2021-36772 affects Zoho ManageEngine ADManager Plus up to version 7110, which is vulnerable to a stored cross-site scripting (XSS) flaw. The available connected sources confirm the affected product and the vulnerable version range (before 7110) and describe the impact as stored XSS. The CVSS ...

PT-2021-21347

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue is related to reflected XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

CVE-2021-33911: Undefined Security Weakness

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2021-36771: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

ZOHO ManageEngine ADManager Plus 代码注入漏洞

Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...

PT-2021-21348

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue allows stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2021-20362

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows remote code execution. Recommendations: For versions prior to 7110, update to version 7110 or later to resolve the issue...

CVE-2021-36772: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

ZOHO ManageEngine ADManager Plus 跨站脚本漏洞

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

Zoho managengine ADManager Plus 跨站脚本漏洞

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

Zoho ManageEngine ADSelfService Plus Information Disclosure Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

Information disclosure

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...