Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zohocorp manageengine adselfservice plus 6.1 vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2021-33256
A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username parameter seems to be vulnerable and a reverse shell could be obtained if a privileged user exports "Us...
Zohocorp Manageengine Adselfservice Plus 6.1
7.5
CVSSv3
CVE-2023-28342
Zoho ManageEngine ADSelfService Plus prior to 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.
Zohocorp Manageengine Adselfservice Plus 5.7
Zohocorp Manageengine Adselfservice Plus 5.0
Zohocorp Manageengine Adselfservice Plus 5.1
Zohocorp Manageengine Adselfservice Plus 5.2
Zohocorp Manageengine Adselfservice Plus 5.3
Zohocorp Manageengine Adselfservice Plus 5.4
Zohocorp Manageengine Adselfservice Plus 5.5
Zohocorp Manageengine Adselfservice Plus 5.6
Zohocorp Manageengine Adselfservice Plus 4.5
Zohocorp Manageengine Adselfservice Plus 5.8
Zohocorp Manageengine Adselfservice Plus 6.0
Zohocorp Manageengine Adselfservice Plus 6.1
Zohocorp Manageengine Adselfservice Plus 5.0.6
Zohocorp Manageengine Adselfservice Plus 6.2
7.5
CVSSv3
CVE-2021-37419
Zoho ManageEngine ADSelfService Plus prior to 6112 is vulnerable to SSRF.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 6.1
6.8
CVSSv3
CVE-2023-35719
ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present malicious users to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Aut...
Zohocorp Manageengine Adselfservice Plus 6.1
6.8
CVSSv3
CVE-2022-28810
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this fu...
Zohocorp Manageengine Adselfservice Plus 6.1
Zohocorp Manageengine Adselfservice Plus
6.5
CVSSv3
CVE-2021-37420
Zoho ManageEngine ADSelfService Plus prior to 6112 is vulnerable to mail spoofing.
Zohocorp Manageengine Admanager Plus
Zohocorp Manageengine Admanager Plus 6.1
6.1
CVSSv3
CVE-2022-24681
Zoho ManageEngine ADSelfService Plus prior to 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.
Zohocorp Manageengine Adselfservice Plus 6.1
Zohocorp Manageengine Adselfservice Plus
6.1
CVSSv3
CVE-2021-37416
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
Zohocorp Manageengine Adselfservice Plus
Zohocorp Manageengine Adselfservice Plus 6.1
6.1
CVSSv3
CVE-2021-27956
Zoho ManageEngine ADSelfService Plus prior to 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field.
Zohocorp Manageengine Adselfservice Plus
Zohocorp Manageengine Adselfservice Plus 6.1
5.9
CVSSv3
CVE-2021-31874
Zoho ManageEngine ADSelfService Plus prior to 6104, in rare situations, allows malicious users to obtain sensitive information about the password-sync database application.
Zohocorp Manageengine Adselfservice Plus
Zohocorp Manageengine Adselfservice Plus 6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »