192 matches found
ManageEngine ADManager Plus ChangePasswordAction Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine ADManager Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the ChangePasswordAction function. The issue results from the lack of proper...
PT-2023-7422
Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus versions prior to 7181 Description The issue allows for authenticated users to exploit command injection via Proxy settings. This is due to the lack of neutralization of special elements used in the operating system...
CVE-2022-42904
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...
CVE-2022-42904: Improper Neutralization of Special Elements used in a Command
Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings...
PT-2022-26655
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions through 7151 Description The issue allows authenticated admin users to execute commands in proxy settings. Recommendations For Zoho ManageEngine ADManager Plus versions through 7151, consider restricti...
ManageEngine ADManager Plus < Build 7115 RCE
Zoho ManageEngine ADManager Plus before version 7.1 Build 7115 is affected by a filter bypass flaw which allows an unauthenticated, remote attacker to upload a file to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-37921)
An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in ReportsAction class...
Zoho ManageEngine ADManager Plus Arbitrary File Upload (CVE-2021-20130)
An unrestricted file upload vulnerability exists in ManageEngine ADManager Plus. The vulnerability is due to lack of validation of uploaded files in PasswordExpiryAction class...
CVE-2021-42002
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
CVE-2021-42002: Undefined Security Weakness
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution...
PT-2021-23466
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7115 Description The issue is related to a filter bypass that can lead to remote code execution through file upload. Recommendations For versions prior to 7115, update to version 7115 or later...
CVE-2021-20131
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...
Remote code execution
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...
CVE-2021-20131
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...
CVE-2021-20130
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...
PT-2021-13788
Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the Personalization interface...
PT-2021-13787
Name of the Vulnerable Software and Affected Versions: ManageEngine ADManager Plus version 7111 Description: The issue is related to a post-authentication remote code execution vulnerability. This vulnerability is caused by improperly validated file uploads in the PasswordExpiry interface...
CVE-2021-20131: Unrestricted Upload of File with Dangerous Type
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface...
CVE-2021-20130: Unrestricted Upload of File with Dangerous Type
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface...