Show filters
506 Total Results
Displaying 241-250 of 506
Sort by:
Attacker Value
Unknown
CVE-2021-28958
Disclosure Date: June 25, 2021 (last updated February 22, 2025)
Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
0
Attacker Value
Unknown
CVE-2021-31857
Disclosure Date: June 16, 2021 (last updated November 28, 2024)
In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.
0
Attacker Value
Unknown
CVE-2021-31159
Disclosure Date: June 16, 2021 (last updated February 22, 2025)
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.
0
Attacker Value
Unknown
CVE-2021-20081
Disclosure Date: June 10, 2021 (last updated February 22, 2025)
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
0
Attacker Value
Unknown
CVE-2021-28382
Disclosure Date: June 07, 2021 (last updated February 22, 2025)
Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.
0
Attacker Value
Unknown
CVE-2021-27956
Disclosure Date: May 20, 2021 (last updated February 22, 2025)
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
0
Attacker Value
Unknown
CVE-2021-28959
Disclosure Date: April 30, 2021 (last updated February 22, 2025)
Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution.
0
Attacker Value
Unknown
CVE-2021-20080
Disclosure Date: April 09, 2021 (last updated February 22, 2025)
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
0
Attacker Value
Unknown
CVE-2021-20078
Disclosure Date: April 01, 2021 (last updated February 22, 2025)
Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS.
0
Attacker Value
Unknown
CVE-2020-9367
Disclosure Date: March 18, 2021 (last updated February 22, 2025)
The MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to DLL Hijacking: dcinventory.exe and dcconfig.exe try to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because this DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code, leading to an escalation of privilege to NT AUTHORITY\SYSTEM.
0
