2138 matches found
CVE-2022-26777
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...
CVE-2022-26653
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...
Design/Logic Flaw
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...
Design/Logic Flaw
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...
CVE-2022-26653
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...
CVE-2022-26653
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details such as the username and GUID of an administrator...
CVE-2022-26653
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 exposes sensitive information to guest users. Connected sources corroborate: CVE-2022-26653 (NVD) states guest access can view domain details such as administrator username and GUID; Red Hat advisories RH:CVE-2022-26653 and RH:CVE-2022-2677...
CVE-2022-26777
Zoho ManageEngine Remote Access Plus (before 10.1.2137.15) is affected by CVE-2022-26777 and CVE-2022-26653, as described in connected Red Hat and CNVD records. The vulnerability is an information disclosure that allows guest users to view sensitive details (license information in CVE-2022-26777;...
CVE-2022-26777
Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...
Zoho ManageEngine Remote Access Plus 安全漏洞
Zoho ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine Remote Access Plus, which could be exploited by an attacker to allow guest users to view domain details such as the administrator's username and GUID...
CVE-2022-24681
Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen...
CVE-2022-24681
Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen...
CVE-2022-24681
CVE-2022-24681 affects ManageEngine ADSelfService Plus prior to 6121, with a cross-site scripting (XSS) vulnerability via the welcome name attribute on the Reset Password, Unlock Account, and User Must Change Password screens. The Nuclei template and Red Hat/NVD entries corroborate the issue; sev...
Zoho ManageEngine ADAudit Plus权限提升漏洞
An elevation of privilege vulnerability previously existed in Zoho ManageEngine ADAudit Plus 7055, which stems from the presence of a password field in a JSON response that an attacker could could use this vulnerability to perform an authenticated elevation of privilege on the integrated product...
PT-2022-16796 · Zoho · Zoho Manageengine Adselfservice Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions prior to 6121 Description: The issue allows for XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen. This can be exploited by manipulating...
Zoho ManageEngine ADAudit Plus Remote Code Execution Vulnerability
Zoho ManageEngine Adaudit Plus, from Zoho Corporation, is used to simplify auditing, prove compliance, and detect threats. remote code execution vulnerability exists in versions of Zoho ManageEngine ADAudit Plus prior to 7060, which can be exploited by unauthenticated attackers to remote code...
Zoho ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability (CNVD-2022-29865)
Zoho ManageEngine SupportCenter Plus is a web-based customer support software from Zoho India. It is used to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process.A cross-sit...
CVE-2022-25373
Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history...