Show filters
16 Total Results
Displaying 11-16 of 16
Sort by:
Attacker Value
Unknown

CVE-2019-11511

Disclosure Date: April 25, 2019 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
0
Attacker Value
Unknown

CVE-2019-7161

Disclosure Date: March 21, 2019 (last updated November 27, 2024)
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data.
0
Attacker Value
Unknown

CVE-2019-3905

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.
0
Attacker Value
Unknown

CVE-2018-20664

Disclosure Date: January 03, 2019 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
0
Attacker Value
Unknown

CVE-2018-20484

Disclosure Date: December 26, 2018 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
0
Attacker Value
Unknown

CVE-2018-20485

Disclosure Date: December 26, 2018 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
0