6460 matches found
Authentication flaw
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
CVE-2020-35682
CVE-2020-35682 affects Zoho ManageEngine ServiceDesk Plus prior to version 11134, where an Authentication Bypass can occur during SAML login due to the underlying authorization flaw. Public sources consistently describe an SAML-login bypass leading to elevated access; patches exist to reach versi...
ZOHO ManageEngine ServiceDesk Plus 安全漏洞
Zoho ManageEngine ServiceDesk Plus SDP is a web-based IT helpdesk software with integrated asset and project management capabilities, based on the ITIL framework. An authentication bypass vulnerability exists in Zoho ManageEngine ServiceDesk Plus prior to version 11134 during SAML login. No detai...
PT-2021-11825
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 11134 Description: The issue allows an authentication bypass, but only during SAML login. Recommendations: For versions prior to 11134, update to version 11134 or later to resolve the issue...
CVE-2020-35682: Incorrect Authorization
Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass only during SAML login...
Zoho ManageEngine Desktop Central has an unspecified vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management.A security...
SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers
A malicious web shell deployed on Windows systems by leveraging a previously undisclosed zero-day in SolarWinds' Orion network monitoring software may have been the work of a possible Chinese threat group. In a report published by Secureworks on Monday, the cybersecurity firm attributed the...
Zoho ManageEngine ADSelfService Plus跨站脚本漏洞
ZOHO ManageEngine ADSelfService Plus, an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, is vulnerable to cross-site scripting. A cross-site scripting vulnerability exists in Zoho ManageEngine ADSelfService Plus, which...
Zoho ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-17218)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine ADManager Plus 7066. No detailed vulnerability details are provided at this time...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
Authentication flaw
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-28050
Zoho ManageEngine Desktop Central before build 10.0.647 allows a single authentication secret from multiple agents to communicate with the server...
CVE-2020-28050
Zoho ManageEngine Desktop Central prior to build 10.0.647 is affected by CVE-2020-28050, where a single authentication secret from multiple agents can be used to communicate with the server. The issue is described as a high-severity vulnerability (CVSS3.1: 9.1, CRITICAL) with network attack vecto...
CVE-2020-35594
The CVE-2020-35594 issue affects Zoho ManageEngine ADManager Plus prior to version 7066, where a cross-site scripting (XSS) vulnerability exists. The vulnerability is evidenced across multiple sources (CNVD, PRION, NVD, Red Hat) consistently stating that versions before 7066 are vulnerable to XSS...