CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732...

CVE-2021-31857

In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types...

ZOHO ManageEngine Password Manager Pro 安全漏洞

ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO USA. Additional vulnerabilities exist in Zoho ManageEngine Password Manager Pro. An attacker can use this vulnerability to obtain credentials for non-website resource types via a browser extension...

Zoho ManageEngine ServiceDesk Plus MSP 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates functional modules for incident management, problem management, asset management IT project management, procurement and...

Zoho ManageEngine Eventlog Analyzer Path Traversal Vulnerability

ZOHO ManageEngine EventLog Analyzer is a system and event log analysis software from ZOHO. A path traversal vulnerability exists in Zoho ManageEngine Eventlog Analyzer 12147 and earlier versions, which is caused by an unauthenticated directory traversal through a ZIP archive entry. An attacker...

ZOHO ManageEngine ServiceDesk Plus Input Validation Error Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP, an ITIL-based IT service management software from ZOHO, is vulnerable to an input validation error in versions prior to ZOHO ManageEngine ServiceDesk Plus SDP 11205, which could be exploited by an attacker to execute arbitrary commands with SYSTEM privilege...

ZOHO ManageEngine ServiceDesk Plus 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP, an ITIL-based IT service management software from ZOHO, is vulnerable to an input validation error in versions prior to ZOHO ManageEngine ServiceDesk Plus SDP 11205, which could be exploited by an attacker to execute arbitrary commands with SYSTEM privilege...

CVE-2021-28382

Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD...

Cross site scripting

Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD...

CVE-2021-28382

Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD...

Zoho ManageEngine Key Manager Plus 6001 跨站脚本漏洞

ZOHO ManageEngine Key Manager Plus is a WEB-based SSH key management solution from ZOHO that helps you harden, control, manage, monitor and audit SSH keys across the entire lifecycle of a secret key. It provides administrators with visual SSH management capabilities to help them effectively contr...

Zoho ManageEngine ADSelfService Plus Cross-Site Scripting Vulnerability (CNVD-2021-37588)

ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlock, profile information update, etc. without relying on a help desk. A stored cross-site scripting vulnerability exists in the...

CVE-2021-27956

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

CVE-2021-27956

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

Cross site scripting

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

CVE-2021-27956

Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...

CVE-2021-28959

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution...

CVE-2021-28959

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution...

Zoho ManageEngine OpManager Remote Code Execution Vulnerability (CNVD-2021-30701)

ZOHO ZOHO ManageEngine OpManager is an end-to-end integrated network management software, which can realize all-round, visualized, unified and centralized monitoring and management of IT infrastructure such as network devices, servers, hosts, WAN links, applications and services within the...