10695 matches found
CVE-2023-34197
Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
Cross site scripting
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
ZOHO ManageEngine ServiceDesk Plus 安全漏洞
ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...
CVE-2023-37308
Product : Zoho ManageEngine ADAudit Plus. Vulnerability : Cross-site Scripting (XSS) via the username field in builds prior to 7100 . Root cause / impact : Malicious JavaScript could be executed when authorized users load reports. Affected versions : ADAudit Plus before 7100. Remediation : Upgrad...
CVE-2023-37308
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...
Zoho ManageEngine ADAudit Plus 跨站脚本漏洞
ZOHO ManageEngine ADAudit Plus is used by ZOHO to simplify auditing, prove compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7100 that stems from a cross-site scripting attack via the username field...
CVE-2023-34197
CVE-2023-34197 affects Zoho ManageEngine ServiceDesk Plus (versions before 14202), ServiceDesk Plus MSP (before 14300), and SupportCenter Plus (before 14300). The issue is a privilege escalation in the Release module that allows unprivileged users to access and modify the Reminders of a release t...
PT-2023-4103 · Zoho · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7100 Description: The issue is related to a lack of protection in the web page structure of Zoho ManageEngine ADAudit Plus, allowing for a remote attacker to conduct a cross-site scripting XSS...
PT-2023-24732 · Zoho · Zoho Manageengine Servicedesk Plus +1
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14202 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14300 Zoho ManageEngine SupportCenter Plus versions prior to 14300 Description: The issue allows unprivileged users to access...
CVE-2023-35786
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files...
CVE-2023-35786
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files...
CVE-2023-35786
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files...
Code injection
Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files...
ZOHO ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
PT-2023-25314 · Zoho · Zoho Manageengine Admanager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7183 Description: The issue allows admin users to exploit an XXE problem to view files. Recommendations: For versions prior to 7183, update to version 7183 or later to resolve the issue...