ZOHO ManageEngine ADSelfService Plus 安全漏洞

An information disclosure exists in Zoho ManageEngine ADSelfService Plus, ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A vulnerability exists in Zoho ManageEngine ADSelfService Plus, which stems from the disclosure of...

CVE-2022-28810

Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with...

ZOHO ManageEngine ADSelfService Plus 信任管理问题漏洞

ZOHO ManageEngine ADSelfService Plus is an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, Inc. version 6122, a remote code execution vulnerability exists that can be exploited by remote and partially authenticated...

PT-2022-19250 · Zoho · Zoho Manageengine Adselfservice Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions prior to 6122 Description: The issue allows a remote authenticated administrator to execute arbitrary operating system commands as SYSTEM via the policy custom script feature. This can be exploite...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

Design/Logic Flaw

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

Design/Logic Flaw

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 exposes sensitive information to guest users. Connected sources corroborate: CVE-2022-26653 (NVD) states guest access can view domain details such as administrator username and GUID; Red Hat advisories RH:CVE-2022-26653 and RH:CVE-2022-2677...

CVE-2022-26653

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...

CVE-2022-26777

Zoho ManageEngine Remote Access Plus (before 10.1.2137.15) is affected by CVE-2022-26777 and CVE-2022-26653, as described in connected Red Hat and CNVD records. The vulnerability is an information disclosure that allows guest users to view sensitive details (license information in CVE-2022-26777;...

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

Zoho ManageEngine Remote Access Plus 安全漏洞

Zoho ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine Remote Access Plus, which could be exploited by an attacker to allow guest users to view domain details such as the administrator's username and GUID...

PT-2022-18077 · Zoho · Zoho Manageengine Remote Access Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Remote Access Plus versions prior to 10.1.2137.15 Description: The issue allows guest users to view license details. Recommendations: For versions prior to 10.1.2137.15, update to version 10.1.2137.15 or later to resolve the...

CVE-2022-20714

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to the incorrect handling of malformed packets that are...

Design/Logic Flaw

A vulnerability in the data plane microcode of Lightspeed-Plus line cards for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the line card to reset. This vulnerability is due to the incorrect handling of malformed packets that are...

CVE-2022-20714

CVE-2022-20714 affects Cisco IOS XR on ASR 9000 Series Lightspeed-Plus line cards (e.g., ASR 9902/9903). The issue is in the data plane microcode where malformed IPv4/IPv6 packets can trigger a line card reset, causing DoS for traffic traversing the card. Exploitation requires no authentication. ...