org.eclipse.jetty.aggregate:jetty-all (7.4.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.4.0.rc0) +24 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.4.0.rc0)

org.eclipse.jetty:jetty-xml MAVEN version 7.4.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.19.v20160209), org.eclipse.jetty.aggregate:jetty-all-server (7.6.19.v20160209) +22 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.6.19.v20160209)

org.eclipse.jetty:jetty-xml MAVEN version 7.6.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.19.v20160209 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.v20110901), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.v20110901) +27 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.5.0.v20110901)

org.eclipse.jetty:jetty-xml MAVEN version 7.5.0.v20110901 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.v20110901 -...

org.eclipse.jetty.aggregate:jetty-all (7.4.1.v20110513), org.eclipse.jetty.aggregate:jetty-all-server (7.4.1.v20110513) +36 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.4.1.v20110513)

org.eclipse.jetty:jetty-xml MAVEN version 7.4.1.v20110513 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.4.1.v20110513 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.6.v20120903), org.eclipse.jetty.aggregate:jetty-all-server (7.6.6.v20120903) +28 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.6.6.v20120903)

org.eclipse.jetty:jetty-xml MAVEN version 7.6.6.v20120903 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.6.v20120903 -...

org.eclipse.jetty.aggregate:jetty-all (7.0.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.0.0.rc3) +19 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.0.0.rc3)

org.eclipse.jetty:jetty-xml MAVEN version 7.0.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.0.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

Vulnerability fixed in Zoho ManageEngine ADAudit Plus

Zoho has fixed a vulnerability in ManageEngine ADAudit Plus. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the victim's browser and potentially allows the malicious party able to gain access to...

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

CVE-2023-34197

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications...

CVE-2023-34197

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications...

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

Cross site scripting

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

ZOHO ManageEngine ServiceDesk Plus security vulnerabilities

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...

PT-2023-24732 · Zoho · Zoho Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14202 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14300 Zoho ManageEngine SupportCenter Plus versions prior to 14300 Description: The issue allows unprivileged users to access...

CVE-2023-34197: Incorrect Authorization

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications...

CVE-2023-37308

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

PT-2023-4103 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7100 Description: The issue is related to a lack of protection in the web page structure of Zoho ManageEngine ADAudit Plus, allowing for a remote attacker to conduct a cross-site scripting XSS...

CVE-2023-37308: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field...

CVE-2023-34197

CVE-2023-34197 affects Zoho ManageEngine ServiceDesk Plus (versions before 14202), ServiceDesk Plus MSP (before 14300), and SupportCenter Plus (before 14300). The issue is a privilege escalation in the Release module that allows unprivileged users to access and modify the Reminders of a release t...