CVE-2021-37925

CVE-2021-37925 affects Zoho ManageEngine ADManager Plus, versions 7110 and earlier. The issue is a Post-Auth OS command injection vulnerability, with Red Hat, NVD, PRION, CVE lists and CNNVD entries corroborating the description. The CVSS calculations indicate a high-impact, critical exposure: CV...

PT-2021-21919

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for account takeover via SSO. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, update to a version later than 7110 to resolve...

CVE-2021-37927: Improper Verification of Cryptographic Signature

Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...

Vulnerabilities fixed in Zoho ManageEngine ADManager Plus Pro

Vulnerabilities have been fixed in ManageEngine ADManager Plus Pro. The vulnerabilities allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Increased...

CVE-2021-37925: Improper Neutralization of Special Elements used in an OS Command

Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...

Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability (CNVD-2021-88247)

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to execute code...

ZOHO ManageEngine ADManager Plus has an operating system command injection vulnerability

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...

Zoho Corporation ADManager Plus has a data falsification vulnerability

ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...

PT-2021-21917

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue is related to a Post-Auth OS command injection. This means that after authentication, an attacker could potentially inject commands to the operating system, which...

CVE-2021-37741

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

CVE-2021-37741

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

Authentication flaw

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

CVE-2021-37741

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

CVE-2021-37741

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

CVE-2021-37741

CVE-2021-37741 affects Zoho/ManageEngine ADManager Plus prior to version 7111. The documented issue is a pre-authentication remote code execution vulnerability, allowing an attacker to run code without valid login. NVD data assigns CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low c...

CVE-2021-37741: Unrestricted Upload of File with Dangerous Type

ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...

PT-2021-21855

Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus versions prior to 7111 Description: The issue concerns pre-authentication remote code execution vulnerabilities. Recommendations: For versions prior to 7111, update to version 7111 or later to resolve the issue...

ZOHO ManageEngine ADManager Plus code-related vulnerabilities

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to execute code...

ManageEngine ADManager Plus < 7111 RCE

Binary data manageengineadmanagerplus7111rce.nbin...

ZOHO ManageEngine ADManager Plus Cross-Site Scripting Vulnerability (CNVD-2021-60538)

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...