CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/01/03 10:15 p.m.•38 views

CVE-2021-20147

ManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in the UMCP operation of the ChangePasswordAPI. This allows an unauthenticated remote attacker to determine whether a Windows domain user exists...

5.3CVSS0.069EPSS

SaveExploits1References1

Cvelist•added 2022/01/03 9:07 p.m.•58 views

CVE-2021-20147

5.6AI score0.069EPSS

SaveExploits1References1

CVE•added 2022/01/03 9:07 p.m.•79 views

CVE-2021-20147

Affected product: ManageEngine ADSelfService Plus (below build 6116). Vulnerability: observable response discrepancy in the UMCP operation of the ChangePasswordAPI that can be exploited by an unauthenticated remote attacker to determine whether a Windows domain user exists. Root cause / vulnerabi...

5.3CVSS5.3AI score0.069EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/01/03 12:00 a.m.•4 views

CVE-2021-20147: Observable Discrepancy

5.3CVSS5.9AI score0.069EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by