CVE-2022-24681

Published: Apr 7, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the Reset Password, Unlock Account, or User Must Change Password screen.

Affected (23)

Products: Zohocorp: Manageengine Adselfservice Plus

Zohocorp

1 product

Manageengine Adselfservice Plus

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Adselfservice Plus	Before 6.1
Zohocorp Manageengine Adselfservice Plus	Version 6.1
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6100
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6101
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6102
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6103
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6104
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6105
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6106
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6107
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6108
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6109
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6110
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6111
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6112
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6113
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6114
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6115
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6116
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6117
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6118
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6119
Zohocorp Manageengine Adselfservice Plus	Version 6.1 6120