CVE Vulnerability

zohocorp

CVE-2021-37419

by

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.

CVE-2021-37420

by

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.

CVE-2021-37421

by

Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.

CVE-2021-37422

by

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.

CVE-2021-37423

by

Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.

CVE-2021-37424

by

ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.