Lucene search
+L

196 matches found

Cvelist
Cvelist
added 2022/04/05 6:30 p.m.27 views

CVE-2022-25373

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history...

5.4AI score0.01104EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.6 views

Zoho ManageEngine SupportCenter Plus 跨站脚本漏洞

Zoho ManageEngine SupportCenter Plus is a web-based customer support software from Zoho India. It is used to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process.A cross-sit...

5.4CVSS5.2AI score0.01104EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/02/07 12:0 a.m.12 views

The vulnerability of the configuration of software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus lies in the absence of authentication procedures, which allow attackers to execute arbitrary code.

The vulnerability of the configuration of software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute...

10CVSS8.5AI score0.93514EPSS
SaveExploits6References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.7 views

The vulnerability of the software for the Zoho ManageEngine SupportCenter Plus service lies in its authentication procedures. This vulnerability allows a perpetrator to bypass the authentication process and gain unauthorized access to the device.

The vulnerability of the Zoho ManageEngine SupportCenter Plus software lies in its authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain unauthorized access to the device...

10CVSS8.1AI score0.03193EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/12/09 12:0 a.m.55 views

Zoho ManageEngine SupportCenter Plus Licensing Issue Vulnerability

Zoho ManageEngine SupportCenter Plus is a customer service support management software from ZOHO, Inc. The software provides help desk, customer management, service level management and tracking of customer requests.An authorization issue vulnerability exists in Zoho ManageEngine SupportCenter...

9.8CVSS2AI score0.03193EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2021/12/07 9:41 p.m.270 views

Oh No, Zoho: Active Exploitation of CVE-2021-44077 Allowing Unauthenticated Remote Code Execution

CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Last Update ---|---|---|---|---|--- CVE-2021-44077 | Zoho's Advisory | AttackerKB | In Development | Immediately | December 9, 1:30pm ET Summary Zoho customers have had a huge incentive lately to keep their software up to date,...

7.5CVSS0.5AI score0.93514EPSS
SaveExploits6
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.8 views

Zoho ManageEngine SupportCenter Plus 授权问题漏洞

Zoho ManageEngine SupportCenter Plus is a customer service support management software from ZOHO, Inc. The software provides help desk, customer management, service level management and tracking of customer requests.An authorization issue vulnerability exists in Zoho ManageEngine SupportCenter...

9.8CVSS5.7AI score0.03193EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/12/02 12:0 a.m.36 views

ZOHO ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability (CNVD-2021-94824)

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. used to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process.A cross-site...

6.1CVSS1.6AI score0.00986EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/02 12:0 a.m.45 views

ZOHO ManageEngine SupportCenter Plus server-side request forgery vulnerability

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. Used to allow organizations to effectively manage customer requests, their account and contact information, and service contracts, and in the process provide a superior customer experience, ZOHO...

7.5CVSS2.3AI score0.02617EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/02 12:0 a.m.44 views

ZOHO ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability (CNVD-2021-94825)

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. A cross-site scripting vulnerability exists in ZOHO ManageEngine SupportCenter Plus, which stems from the product's failure to validate user identities and could be exploited by attackers to obtain a...

6.1CVSS3AI score0.02745EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/12/01 12:0 a.m.3 views

VulnCheck KEV: CVE-2021-44077

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution...

9.8CVSS8AI score0.93514EPSS
SaveExploits6References1
NVD
NVD
added 2021/11/30 7:15 p.m.21 views

CVE-2021-43295

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...

6.1CVSS0.02745EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.4 views

CVE-2021-43296

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...

7.5CVSS7.1AI score0.02617EPSS
SaveExploits0References3
OSV
OSV
added 2021/11/30 7:15 p.m.8 views

CVE-2021-43296

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...

7.5CVSS5.8AI score0.02617EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/30 7:15 p.m.7 views

CVE-2021-43295

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...

6.1CVSS5.8AI score0.02745EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.5 views

CVE-2021-43295

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...

6.1CVSS6.4AI score0.02745EPSS
SaveExploits0References3
OSV
OSV
added 2021/11/30 7:15 p.m.8 views

CVE-2021-43294

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

6.1CVSS5.8AI score0.00986EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/30 7:15 p.m.4 views

CVE-2021-43294

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

6.1CVSS6.4AI score0.00986EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/30 7:15 p.m.26 views

CVE-2021-43294

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

6.1CVSS0.00986EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/30 7:15 p.m.15 views

Design/Logic Flaw

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

4.3CVSS5.9AI score0.00986EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder