Show filters
48 Total Results
Displaying 41-48 of 48
Sort by:
Attacker Value
Unknown
CVE-2018-20664
Disclosure Date: January 03, 2019 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.x before build 5701 has XXE via an uploaded product license.
0
Attacker Value
Unknown
CVE-2018-20484
Disclosure Date: December 26, 2018 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
0
Attacker Value
Unknown
CVE-2018-20485
Disclosure Date: December 26, 2018 (last updated November 27, 2024)
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
0
Attacker Value
Unknown
CVE-2014-3779
Disclosure Date: January 07, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arbitrary web script or HTML via the name parameter to GroupSubscription.do.
0
Attacker Value
Unknown
CVE-2011-5105
Disclosure Date: August 23, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
0
Attacker Value
Unknown
CVE-2010-3272
Disclosure Date: February 17, 2011 (last updated October 04, 2023)
accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a validateAll action.
0
Attacker Value
Unknown
CVE-2010-3274
Disclosure Date: February 17, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action.
0
Attacker Value
Unknown
CVE-2010-3273
Disclosure Date: February 17, 2011 (last updated October 04, 2023)
ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult.
0
