CVE-2021-37416: XSS
Published Aug 30, 2021
·Updated
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
Affected Software
6 affected components
ZohoCorp ManageEngine ADSelfService Plus<6.1
ZohoCorp ManageEngine ADSelfService Plus=6.1
ZohoCorp ManageEngine ADSelfService Plus=6.1-6100
ZohoCorp ManageEngine ADSelfService Plus=6.1-6101
ZohoCorp ManageEngine ADSelfService Plus=6.1-6102
ZohoCorp ManageEngine ADSelfService Plus=6.1-6103
Event History
Aug 30, 2021
CVE Published
via MITRE·06:18 PM
Data Sourced
via MITRE·06:18 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37416?
CVE-2021-37416 is a vulnerability in Zoho ManageEngine ADSelfService Plus version 6103 and prior that allows for reflected XSS on the loadframe page.
2
How severe is CVE-2021-37416?
CVE-2021-37416 has a severity rating of 6.1 (medium).
3
How does CVE-2021-37416 affect Zoho ManageEngine ADSelfService Plus?
CVE-2021-37416 affects Zoho ManageEngine ADSelfService Plus versions 6103 and prior, allowing for reflected XSS on the loadframe page.
4
How can I fix CVE-2021-37416?
To fix CVE-2021-37416, update Zoho ManageEngine ADSelfService Plus to version 6.1-6104 or above.
5
Where can I find more information about CVE-2021-37416?
You can find more information about CVE-2021-37416 at the following link: https://blog.stmcyber.com/vulns/cve-2021-37416/