← Back

CVE-2021-37416

nvd nistnuclei
Published: Aug 30, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.

Affected (6)

Zohocorp
1 product
Manageengine Adselfservice Plus
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Adselfservice Plus
Before 6.1
Manageengine Adselfservice Plus
Version 6.1
Manageengine Adselfservice Plus
Version 6.1 6100
Manageengine Adselfservice Plus
Version 6.1 6101
Manageengine Adselfservice Plus
Version 6.1 6102
Manageengine Adselfservice Plus
Version 6.1 6103

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: cve@mitre.org
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory

Timeline

No history available yet.