388 matches found
Cross site scripting
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-33911
CVE-2021-33911 affects Zoho ManageEngine ADManager Plus prior to build 7110, which enables remote code execution. The issue is confirmed across multiple feeds (NVD entry and Red Hat CVE page) with a high-severity impact (CVSS v3.1 base score 9.8; network, no authentication, user interaction not r...
CVE-2021-33911
Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...
CVE-2021-36771
Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...
CVE-2021-36771
Zoho ManageEngine ADManager Plus prior to version 7110 is affected by a reflected XSS vulnerability. The issue arises in the web interface where user-supplied input reflected in responses can be interpreted by a victim’s browser, potentially enabling session or credential theft if an attacker ent...
CVE-2021-36772
CVE-2021-36772 affects Zoho ManageEngine ADManager Plus up to version 7110, which is vulnerable to a stored cross-site scripting (XSS) flaw. The available connected sources confirm the affected product and the vulnerable version range (before 7110) and describe the impact as stored XSS. The CVSS ...
CVE-2021-36772
Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...
ZOHO ManageEngine ADManager Plus 代码注入漏洞
Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...
ZOHO ManageEngine ADManager Plus 跨站脚本漏洞
ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...
Zoho ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-17218)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine ADManager Plus 7066. No detailed vulnerability details are provided at this time...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
Cross site scripting
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-35594
Zoho ManageEngine ADManager Plus before 7066 allows XSS...
CVE-2020-35594
The CVE-2020-35594 issue affects Zoho ManageEngine ADManager Plus prior to version 7066, where a cross-site scripting (XSS) vulnerability exists. The vulnerability is evidenced across multiple sources (CNVD, PRION, NVD, Red Hat) consistently stating that versions before 7066 are vulnerable to XSS...
ZOHO ManageEngine ADManager Plus 跨站脚本漏洞
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine ADManager Plus 7066. No detailed vulnerability details are provided at this time...
CVE-2020-24786
An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build numbe...
Authentication flaw
An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before build number 6033, RecoverManager Plus before build number 6017, EventLog Analyzer before build numbe...
CVE-2020-24786
CVE-2020-24786 affects multiple ManageEngine products (Exchange Reporter Plus, AD360, ADSelfService Plus, DataSecurity Plus, RecoverManager Plus, EventLog Analyzer, ADAudit Plus, O365 Manager Plus, Cloud Security Plus, ADManager Plus, Log360) with a remotely accessible Java servlet (com.manageeng...