6475 matches found
CVE-2021-37417
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...
CVE-2021-33055
Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...
CVE-2021-37416
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...
CVE-2021-37421
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...
Remote code execution
Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...
Input validation
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...
CVE-2021-37421
CVE-2021-37421 affects Zoho ManageEngine ADSelfService Plus 6103 and earlier, with an access-control bypass on the admin portal (bypass via headers such as X-Forwarded-For). Public sources in connected docs confirm the vulnerability exists and that an update/patch was released (6104 and earlier u...
CVE-2021-37421
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass...
CVE-2021-37417
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation...
CVE-2021-37417
CVE-2021-37417 affects Zoho ManageEngine ADSelfService Plus (version 6103 and earlier). The connected sources describe an input validation flaw that enables a CAPTCHA bypass, arising from improper parameter validation in the affected REST/web endpoints. The CVE is documented across multiple feeds...
CVE-2021-37416
Zoho ManageEngine ADSelfService Plus 6103). No exploitation details beyond the XSS scenario are provided here.
CVE-2021-37416
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...
CVE-2021-33055
Zoho ManageEngine ADSelfService Plus through 6102 allows unauthenticated remote code execution in non-English editions...
CVE-2021-33055
CVE-2021-33055 affects Zoho ManageEngine ADSelfService Plus up to version 6102, with unauthenticated remote code execution in non-English editions. The provided sources confirm the vulnerability exists but do not detail the root cause, affected subcomponents, or explicit remediation steps within ...
PT-2021-21645
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6103 and prior Description The issue allows for admin portal access-restriction bypass. Recommendations For versions 6103 and prior, update to a version later than 6103 to resolve the issue...
CVE-2021-37416: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page...
PT-2021-21640
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions 6103 and prior Description The issue is related to reflected XSS on the loadframe page. Recommendations For Zoho ManageEngine ADSelfService Plus versions 6103 and prior, update to a version later...
PT-2021-20029
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions through 6102 Description The issue allows unauthenticated remote code execution in non-English editions. Recommendations For versions through 6102, update to a version that contains a fix for this...