CVE-2018-20484

Mô tả

Tham khảo

• packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html
• manageengine.com/products/self-service-password/release-notes.html · Release Notes

Lỗ hổng khác của manageengine adselfservice plus

• CVE-2025-11250NGHIÊM TRỌNG 9.1Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.
• CVE-2025-3833CAO 8.1Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior are vulnerable to authenticated SQL injection in the MFA reports.
• CVE-2025-1723CAO 8.1Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid ac…
• CVE-2024-27310TRUNG BÌNH 6.5Zoho ManageEngine ADSelfService Plus versions below 6401 are vulnerable to the DOS attack due to the malicious LDAP input.
• CVE-2024-0252CAO 8.8ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load…