10770 matches found
CVE-2021-37927
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
Command injection
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...
Code injection
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
CVE-2021-37927
Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO...
CVE-2021-37927
CVE-2021-37927 affects Zoho ManageEngine ADManager Plus
CVE-2021-37925
Zoho ManageEngine ADManager Plus version 7110 and prior has a Post-Auth OS command injection vulnerability...
CVE-2021-37925
CVE-2021-37925 affects Zoho ManageEngine ADManager Plus, versions 7110 and earlier. The issue is a Post-Auth OS command injection vulnerability, with Red Hat, NVD, PRION, CVE lists and CNNVD entries corroborating the description. The CVSS calculations indicate a high-impact, critical exposure: CV...
Zoho ManageEngine ADSelfService Plus Domain User Account Takeover Vulnerability
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A domain user account takeover vulnerability exists in Zoho ManageEngi...
Zoho ManageEngine ADManager Plus Remote Code Execution Vulnerability (CNVD-2021-88247)
Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A remote code execution vulnerability exists in Zoho ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to execute code...
Vulnerabilities fixed in Zoho ManageEngine ADManager Plus Pro
Vulnerabilities have been fixed in ManageEngine ADManager Plus Pro. The vulnerabilities allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Increased...
Zoho Corporation ADManager Plus 数据伪造问题漏洞
ZOHO ManageEngine ADManager Plus is an Active Directory AD management and reporting solution from Zoho, Inc. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to an authorization issue that could be exploited by an attacker to take over an account via SSO...
ZOHO ManageEngine ADManager Plus 操作系统命令注入漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks such as batch management of user accoun...
Zoho ManageEngine ADSelfService Plus server-side request forgery vulnerability (CNVD-2021-88244)
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A server-side request forgery vulnerability exists in Zoho ManageEngin...
CVE-2021-37424
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover...
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF...
CVE-2021-37741
ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities...