CVE-2021-36771

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-36771

Zoho ManageEngine ADManager Plus prior to version 7110 is affected by a reflected XSS vulnerability. The issue arises in the web interface where user-supplied input reflected in responses can be interpreted by a victim’s browser, potentially enabling session or credential theft if an attacker ent...

CVE-2021-36772

CVE-2021-36772 affects Zoho ManageEngine ADManager Plus up to version 7110, which is vulnerable to a stored cross-site scripting (XSS) flaw. The available connected sources confirm the affected product and the vulnerable version range (before 7110) and describe the impact as stored XSS. The CVSS ...

PT-2021-20362

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows remote code execution. Recommendations: For versions prior to 7110, update to version 7110 or later to resolve the issue...

PT-2021-21348

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue allows stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

PT-2021-21347

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7110 Description The issue is related to reflected XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

CVE-2021-36771: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS...

CVE-2021-33911: Undefined Security Weakness

Zoho ManageEngine ADManager Plus before 7110 allows remote code execution...

CVE-2021-36772: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus before 7110 allows stored XSS...

Zoho ManagEngine ADManager Plus has a cross-site scripting vulnerability

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

ZOHO ManageEngine ADManager Plus has a code injection vulnerability

Zoho ManageEngine ADManager Plus is a Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO, Inc. A security vulnerability exists in Zoho ManageEngine ADManager Plus that could be exploited by attackers to execute remote code...

ZOHO ManageEngine ADManager Plus has a cross-site scripting vulnerability

ZOHO ManageEngine ADManager Plus is a set of Microsoft Active Directory management software designed for enterprise users using Windows domains from ZOHO USA.ZOHO ManageEngine ADManager Plus has a security vulnerability, no details of the vulnerability are available...

Zoho ManageEngine ADSelfService Plus Information Disclosure Vulnerability

Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

Information disclosure

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

CVE-2021-31874

CVE-2021-31874 affects Zoho ManageEngine ADSelfService Plus prior to version 6104. In rare situations, it allows attackers to obtain sensitive information about the password-sync database. The provided documents describe the disclosure impact but do not include concrete exploit details, affected ...

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

ManageEngine ServiceDesk Plus < 11.2 Build 11205 RCE

A command injection vulnerability exists in ManageEngine ServiceDesk Plus 11.2 Build 11205 due to insufficient sanitisation of user supplied input. An authenticated, remote attacker can exploit this to execute arbitrary commands with SYSTEM privileges. Note that Nessus has not tested for this iss...