Command injection

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

Server side request forgery (ssrf)

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...

Remote code execution

Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution...

CVE-2021-42099

The CVE-2021-42099 entry applies to Zoho ManageEngine M365 Manager Plus prior to version 4421. The issue is a file-upload vulnerability caused by insufficient filtering/restriction of uploaded files, enabling remote code execution. Documents from multiple sources (CNVD/CNNVD, Red Hat, NVD) confir...

CVE-2021-42099

Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution...

CVE-2021-43319

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-43296

Affects: Zoho ManageEngine SupportCenter Plus, prior to version 11016. Issue: server-side request forgery (SSRF) in ActionExecutor caused by inadequate authentication of the user identity. Impact: information exposure risk as described across sources; CVSS details show potential confidentiality i...

CVE-2021-43295

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...

CVE-2021-43294

The CVE-2021-43294 entry concerns Zoho ManageEngine SupportCenter Plus prior to 11016, with a Reflected XSS vulnerability in the Products module. Public sources (NVD, CNVD/CNNVD) confirm existence of a cross-site scripting flaw that could enable theft of cookie-based credentials, indicating an at...

CVE-2021-43294

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

PT-2021-23806

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to Reflected XSS in the Products module. Recommendations For versions prior to 11016, update to version 11016 or later to resolve the issue...

Zoho ManageEngine M365 Manager Plus 4421 代码问题漏洞

ZOHO ManageEngine M365 Manager Plus is an extensive Microsoft 365 tool from ZOHO, Inc. It is used to report, manage, monitor, audit and create alerts for critical activities.A file upload vulnerability exists in versions prior to ZOHO ManageEngine M365 Manager Plus 4421, which stems from the lack...

Zoho ManageEngine SupportCenter Plus 跨站脚本漏洞

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. used to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process.A cross-site...

PT-2021-23809

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager versions prior to 125488 Description The issue is related to command injection due to improper validation in the Ping functionality. This allows for potential exploitation. No information is...

CVE-2021-43319: Improper Neutralization of Special Elements used in a Command

Zoho ManageEngine Network Configuration Manager before 125488 is vulnerable to command injection due to improper validation in the Ping functionality...

CVE-2021-43296: Server-Side Request Forgery (SSRF)

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...

CVE-2021-43295: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...

CVE-2021-43294: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...

PT-2021-23808

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to a Server-Side Request Forgery SSRF attack in the ActionExecutor. This type of attack allows an attacker to trick the server into making requests t...

Zoho ManageEngine SupportCenter Plus 跨站脚本漏洞

ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO, Inc. A cross-site scripting vulnerability exists in ZOHO ManageEngine SupportCenter Plus, which stems from the product's failure to validate user identities and could be exploited by attackers to obtain a...