6477 matches found
ZOHO ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2021-78743)
ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. ZOHO ManageEngine Applications Manager is vulnerable to a cross-site scripting vulnerability that could be exploited to execute malicious JavaScript...
CVE-2021-31874: Undefined Security Weakness
Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...
PT-2021-19558
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADSelfService Plus versions prior to 6104 Description: The issue allows attackers to obtain sensitive information about the password-sync database application in rare situations. Recommendations: For versions prior to 6104,...
Zoho ManageEngine AdSelfService Plus has security vulnerabilities
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An information disclosure vulnerability exists in Zoho ManageEngine...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
Cross site scripting
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
CVE-2021-31813
CVE-2021-31813 affects Zoho ManageEngine Applications Manager prior to 15130. The vulnerability is a Stored XSS flaw that occurs when importing malicious user details (e.g., a crafted user name) from Active Directory. Multiple sources (NVD entry, Red Hat advisory, CNVD/CNNVD entries) describe thi...
CVE-2021-31813: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details e.g., a crafted user name from AD...
PT-2021-19521
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to 15130 Description The issue allows for Stored XSS attacks when importing malicious user details, such as a crafted user name, from Active Directory AD. This occurs due to improper handli...
Zoho ManageEngine ServiceDesk Plus MSP Server-Side Request Forgery Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...
Zoho ManageEngine ServiceDesk Plus MSP Improper Access Control Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An improper access control vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. An attacker could exploit the vulnerability to access internal data...
Zoho ManageEngine ServiceDesk Plus MSP Information Disclosure Vulnerability
Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An information disclosure vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10522. No detailed vulnerability details are provided at this time...
CVE-2021-31160
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...
CVE-2021-31530
Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...
CVE-2021-31531
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...