5185 matches found
Zoho ManageEngine ADSelfService Plus Information Disclosure Vulnerability
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...
CVE-2021-31874
Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...
CVE-2021-31874
Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...
Information disclosure
Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...
CVE-2021-31874
Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...
CVE-2021-31874
CVE-2021-31874 affects Zoho ManageEngine ADSelfService Plus prior to version 6104. In rare situations, it allows attackers to obtain sensitive information about the password-sync database. The provided documents describe the disclosure impact but do not include concrete exploit details, affected ...
ZOHO ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2021-78743)
ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. ZOHO ManageEngine Applications Manager is vulnerable to a cross-site scripting vulnerability that could be exploited to execute malicious JavaScript...
ManageEngine ServiceDesk Plus < 11.2 Build 11205 RCE
A command injection vulnerability exists in ManageEngine ServiceDesk Plus 11.2 Build 11205 due to insufficient sanitisation of user supplied input. An authenticated, remote attacker can exploit this to execute arbitrary commands with SYSTEM privileges. Note that Nessus has not tested for this iss...
zoho manageengine adselfservice plus 安全漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
Cross site scripting
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
CVE-2021-31813 affects Zoho ManageEngine Applications Manager prior to 15130. The vulnerability is a Stored XSS flaw that occurs when importing malicious user details (e.g., a crafted user name) from Active Directory. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD entries) describe thi...
Zoho ManageEngine ServiceDesk Plus MSP Improper Access Control Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An improper access control vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. An attacker could exploit the vulnerability to access internal data...
Zoho ManageEngine ServiceDesk Plus MSP Server-Side Request Forgery Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...
Zoho ManageEngine ServiceDesk Plus MSP Information Disclosure Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An information disclosure vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10522. No detailed vulnerability details are provided at this time...