CVE-2021-27956

概要

参考情報

• pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes · Vendor Advisory
• raxis.com/blog/cve-2021-27956-manage-engine-xss · Exploit
• manageengine.com · Vendor Advisory

manageengine adselfservice plus のその他の脆弱性

• CVE-2025-11250緊急 9.1Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.
• CVE-2025-3833高 8.1Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.
• CVE-2025-1723高 8.1Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid ac…
• CVE-2024-27310中 6.5Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.
• CVE-2024-0252高 8.8ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load…