CVE-2019-16268

Mô tả

Tham khảo

• esecforte.com/responsible-vulnerability-disclosure-cve-2019-16268-html-injection-vulnerability-in-manageengine-remote-access-plus · Exploit
• manageengine.com/remote-desktop-management/knowledge-base/html-injection.html · Vendor Advisory

Lỗ hổng khác của manageengine remote access plus

• CVE-2023-6105TRUNG BÌNH 5.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-pri…
• CVE-2022-47966NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache San…
• CVE-2022-26777TRUNG BÌNH 5.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.
• CVE-2022-26653TRUNG BÌNH 5.3Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an admi…
• CVE-2021-42955CAO 7.8Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability…