6494 matches found
CVE-2019-11676
The vulnerability CVE-2019-11676 affects Zoho ManageEngine Firewall Analyzer prior to 12.3 Build 123224, where the user defined DNS name is vulnerable to stored XSS. Exploitation details are not provided in the documents; impact is stored XSS with affected input handling. No remediation specifics...
PT-2019-12474
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Firewall Analyzer versions prior to 12.3 Build 123224 Description The issue concerns a stored XSS attack related to the user-defined DNS name. Recommendations For versions prior to 12.3 Build 123224, update to version 12.3...
PT-2019-12476
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Firewall Analyzer versions prior to 12.3 Build 123218 Description The issue concerns the "default reports" feature, which is susceptible to SQL Injection. Recommendations For versions prior to 12.3 Build 123218, update to...
PT-2019-12475
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Firewall Analyzer versions prior to 12.3 Build 123224 Description The issue concerns the Custom Report import function, which is susceptible to XML External Entity XXE Injection. This means that an attacker could potentially...
CVE-2019-11678: Improper Neutralization of Special Elements used in an SQL Command
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection...
CVE-2019-11677: Improper Restriction of XML External Entity Reference
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
CVE-2019-11676: Improper Neutralization of Input During Web Page Generation
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks...
CVE-2018-19374
Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...
CVE-2018-19374
Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...
Directory traversal
Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...
CVE-2018-19374
Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...
PT-2019-9796
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.6 Build 6657 Description The issue allows local users to gain privileges after a reboot by placing a malicious file into a permissive directory. Recommendations For Zoho ManageEngine ADManager Plus...
CVE-2018-19374: Incorrect Permission Assignment for Critical Resource
Zoho ManageEngine ADManager Plus 6.6 Build 6657 allows local users to gain privileges after a reboot by placing a Trojan horse file into the permissive bin directory...
CVE-2019-11511
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API...
CVE-2019-11511
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API...
CVE-2019-11511
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API...
CVE-2019-11511
CVE-2019-11511 affects Zoho ManageEngine ADSelfService Plus, with an XSS flaw exposed via the mobile app API in builds prior to 5708. The vulnerability targets the mobile API path and can lead to script execution in the context of the user’s browser session. Affected component/file is the mobile ...
PT-2019-12344
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADSelfService Plus versions prior to build 5708 Description The issue is related to a security problem where an attacker can execute malicious scripts via the mobile app API. Recommendations For versions prior to build 5708,...