CVE-2022-24681

MEDIO 6.1CVE-2022-24681 · Published 07/04/2022 · updated 17/06/2026

En resumen

CVE-2022-24681 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a manageengine adselfservice plus (zohocorp).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.6%, mayor que el 89.5% de las vulnerabilidades.
Solución: actualizar a 6.1 o posterior.

Package	Affected versions	Patched versions
manageengine adselfservice plus zohocorp	`= 6.1< 6.1`	`6.1`

Description

Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.

References

manageengine.com · Product
raxis.com/blog/cve-2022-24681 · Exploit
manageengine.com/products/self-service-password/kb/CVE-2022-24681.html · Patch

Más vulnerabilidades de manageengine adselfservice plus

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine adselfservice plus

zohocorp

= 6.1< 6.1

6.1

Más vulnerabilidades de manageengine adselfservice plus

Ver todo →