Zoho Adselfservice Plus Sårbarheter

Tidslinje

Version

6103	5
5.0	4
5.1	4
5.x	4
5.2	3

Åtgärd

Official Fix	24
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	17

Utnyttjbarhet

High	5
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	35

Åtkomstvektor

Not Defined	0
Physical	2
Local	1
Adjacent	10
Network	29

Autentisering

Not Defined	0
High	0
Low	16
None	26

Användarinteraktion

Not Defined	0
Required	14
None	28

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	4
≤5	4
≤6	13
≤7	8
≤8	5
≤9	5
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	5
≤5	4
≤6	15
≤7	7
≤8	3
≤9	6
≤10	1

VulDB

≤1	0
≤2	0
≤3	2
≤4	6
≤5	9
≤6	7
≤7	8
≤8	8
≤9	2
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	7
≤8	3
≤9	1
≤10	9

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	1

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	14
<2k	15
<5k	13
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	40
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (33): 4.0, 4.1, 4.2, 4.3, 4.5, 5, 5.0, 5.0 Build 5704, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1, 5.2, 5.3, 5.4, 5.5, 5.6, 5.6 Build 5607, 5.7, 6.1, 5814, 6013, 6101, 6102, 6103, 6111, 6113, 6121, 6203, 6217, 6401

Link to Product Website: https://www.manageengine.com/

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
11/01/2024	9.3	9.1	Zoho ManageEngine ADSelfService Plus Load Balancer Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2024-0252
22/06/2023	6.8	6.8	Zoho ManageEngine ADSelfService Plus GINA Client svag autentisering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-35719
20/06/2023	8.0	7.9	Zoho ManageEngine ADSelfService Plus svag autentisering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2023-35854
06/04/2023	5.5	5.4	Zoho ManageEngine ADSelfService Plus Mobile App Authentication API förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-28342
24/03/2023	5.8	5.8	Zoho ManageEngine ADSelfService Plus IDM Application privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-36413
18/01/2023	7.7	7.6	Zoho ManageEngine Access Manager Plus Apache xmlsec Remote Code Execution	$0-$5k	$0-$5k	High	Official Fix	0.00	CVE-2022-47966
20/05/2022	3.5	3.4	Zoho ManageEngine ADSelfService Plus POST Request login informationsgivning	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-28987
19/04/2022	2.6	2.5	Zoho ManageEngine ADSelfService Plus Configuration informationsgivning	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-29457
18/04/2022	6.3	6.0	Zoho ManageEngine ADSelfService Plus privilegier eskalering	$0-$5k	$0-$5k	High	Official Fix	0.09	CVE-2022-28810
10/09/2021	6.3	6.0	Zoho ManageEngine ADSelfService Plus Database Linking sql injektion	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-37422

32 fler poster visas inte

🔒 Login Required

You need to signup and login to see more of the remaining 32 results.

fler inlägg av Zoho

◂ TidigareÖversiktNästa ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!