2138 matches found
ZOHO ManageEngine ADManager Plus Remote Command Vulnerability
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, USA. A remote command vulnerability exists in ZOHO ManageEngine ADManager Plus, which can be exploited by attackers to perform command injecti...
CVE-2023-29084
Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...
Command injection
Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...
CVE-2023-29084
Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...
ZOHO ManageEngine ADManager Plus 命令注入漏洞
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, USA. A remote command vulnerability exists in ZOHO ManageEngine ADManager Plus, which can be exploited by attackers to perform command injecti...
CVE-2023-29084
CVE-2023-29084 concerns Zoho ManageEngine ADManager Plus. Multiple sources confirm: versions up to build 7181/7180 are vulnerable to authenticated command injection by manipulating the server proxy settings. The underlying issue is insufficient validation of user input when handling proxy configu...
CVE-2023-29084
Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings...
CVE-2023-28340
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
CVE-2023-28341
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
Cross site scripting
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
Design/Logic Flaw
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
CVE-2023-28340
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
CVE-2023-28341
CVE-2023-28341 concerns a stored XSS in Zoho ManageEngine Applications Manager up to version 16340. An unauthenticated attacker can inject malicious JavaScript on the incorrect login details page, via the login page flow. Affected software is Zoho ManageEngine Applications Manager (through 16340)...
CVE-2023-28340
Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack...
CVE-2023-28341
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
CVE-2023-28341
Stored Cross site scripting XSS vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page...
Zoho ManageEngine Applications Manager 代码问题漏洞
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product features application performance management, fault management, report generation, and SLA management. A security vulnerability exists in Zoho...
CVE-2023-28342
Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API...