/ feedZoho ManageEngine Desktop Central contains a file upload vulnerability that allows for unauthenticated remote code execution. CISA required action: Apply updates per vendor instructions.
Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. CISA required action: Apply updates per vendor instructions.
Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. CISA required action: Apply updates per vendor instructions.
Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario. CISA required action: Apply updates per vend…
Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. CISA required action: Apply updates per vendor instructions.