5185 matches found
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
CVE-2021-28960
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
Spoofing
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
Code injection
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
Server side request forgery (ssrf)
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
Command injection
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations...
Authentication flaw
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...
CVE-2021-37741
CVE-2021-37741 affects Zoho/ManageEngine ADManager Plus prior to version 7111. The documented issue is a pre-authentication remote code execution vulnerability, allowing an attacker to run code without valid login. NVD data assigns CVSS v3.1 base score 8.8 (HIGH) with network attack vector, low c...
CVE-2021-37419
Summary: CVE-2021-37419 affects Zoho ManageEngine ADSelfService Plus prior to 6112 and is described as a server-side request forgery (SSRF) vulnerability. Affected product/version: Zoho ManageEngine ADSelfService Plus
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus is affected by a mail spoofing vulnerability in versions prior to 6112. The connected sources consistently reference ADSelfService Plus before 6112 as vulnerable, with remediation implied by version 6112 (hotfix/update). No deeper technical root cause or explo...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
CVE-2021-37424
CVE-2021-37424 affects ManageEngine ADSelfService Plus before 6112, where a domain user account takeover vulnerability exists in the web-based self-service app. Public references in connected documents confirm the affected version range and the vulnerability class (domain user account takeover). ...