Known vulnerabilities in Zoho ManageEngine ADSelfService Plus 6122

Vendor: Zoho Corporation
Software: Zoho ManageEngine ADSelfService Plus
Version: 6122
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_adselfservice_plus:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine ADSelfService Plus version 6122 Zoho ManageEngine ADSelfService Plus 6122 is affected by 7 vulnerabilities: 4 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77737 - Insufficient Verification of Data Authenticity
CVE-2023-35719		 CWE-345 Low
No
No
 - 27.06.2023 SB2023062721
#VU64860 - Improper input validation
CVE-2022-34829		 CWE-20 Medium
No
No
 6203 02.07.2022 SB2022070202
#VU64859 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28987		 CWE-200 Medium
No
No
 6202 02.07.2022 SB2022070201
#VU63623 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 6200 25.05.2022 SB2022052502
#VU63622 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-37423		 CWE-300 Medium
No
No
 6200 25.05.2022 SB2022052502
#VU63621 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 6123 25.05.2022 SB2022052501
#VU63620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 6123 25.05.2022 SB2022052501