Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
57 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 5.3% | 💥 Exploit | Zohocorp Manageengine Adselfservice Plus | 26/12/2018 | 17/6/2026 | Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature. | |
| Modificada | Media (6.1) | 5.3% | 💥 Exploit | Zohocorp Manageengine Adselfservice Plus | 26/12/2018 | 17/6/2026 | Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation. | |
| Modificada | Media (4.3) | 3.5% | — | Zohocorp Manageengine Adselfservice Plus | 7/1/2015 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arbitrary web script or HTML via the name parameter to GroupSubscription.do. | |
| Modificada | Media (4.3) | 6.0% | 💥 Exploit | Zohocorp Manageengine Adselfservice Plus | 23/8/2012 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274. | |
| Modificada | Media (4.3) | 21% | 💥 Exploit | Zohocorp Manageengine Adselfservice Plus | 17/2/2011 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action. | |
| Modificada | Media (5) | 3.3% | — | Zohocorp Manageengine Adselfservice Plus | 17/2/2011 | 16/6/2026 | ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allows remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, by providing a user id to accounts/ValidateUser, and then providing a new password to accounts/ResetResult. | |
| Modificada | Media (4.3) | 4.0% | 💥 Exploit | Zohocorp Manageengine Adselfservice Plus | 17/2/2011 | 16/6/2026 | accounts/ValidateAnswers in the security-questions implementation in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 makes it easier for remote attackers to reset user passwords, and consequently obtain access to arbitrary user accounts, via a modified (1) Hide_Captcha or (2) quesList parameter in a… |