Information disclosure

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...

CVE-2023-38332

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...

CVE-2023-38332: Undefined Security Weakness

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...

ZOHO ManageEngine ADManager Plus Security Vulnerability

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...

CVE-2023-38332

Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclosure...

CVE-2023-38332

Summary: Zoho ManageEngine ADManager Plus up to version 7.2 Build 7201 contains an unauthorized access vulnerability that could allow an authenticated user to take over another user’s account via sensitive information disclosure. Root cause / impact: improper access control enabling account takeo...

Zoho ManageEngine ADAudit Plus XSS

The vulnerability of the Windows Active Directory AD management and reporting software Zoho ManageEngine ADAudit Plus exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

londonvacuumplus.ca Cross Site Scripting vulnerability OBB-3565947

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-4674

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus versions prior to 7203 Description The issue is related to inadequate access control in the Zoho ManageEngine ADManager Plus software, which can be exploited by a remote attacker to gain unauthorized access to...

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

Design/Logic Flaw

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

ZOHO ManageEngine SupportCenter Plus Cross-site Scripting Vulnerability

ZOHO ManageEngine SupportCenter Plus is a Web-based customer support software from ZOHO, Inc. It is designed to allow organizations to effectively manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process. A...

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

CVE-2023-38331: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module...

CVE-2023-38331

CVE-2023-38331 affects Zoho ManageEngine SupportCenter Plus versions 14001 and below, with a stored XSS vulnerability in the products module. The issue is documented across multiple sources (NVD/Red Hat/Nessus/PRION/CNNVD) and is characterized by stored cross-site scripting, enabling injection in...

PT-2023-26491 · WordPress · Ultimate Social Media Plus +1

Name of the Vulnerable Software and Affected Versions: Ultimate Social Media Plus plugin versions through 3.5.7 Social Share Icons & Social Share Buttons versions through 3.5.7 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configur...

PT-2023-26366 · Zoho · Zoho Manageengine Supportcenter Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Support Center Plus versions 14001 and below Description: The issue concerns a stored XSS vulnerability in the products module. Recommendations: For versions 14001 and below, update to a version above 14001 to resolve the...