zohocorp manageengine-key-manager-plus CVE-2021-28382 is a vulnerability in Zoho Corp Manageengine Key Manager Plus
Published on June 7, 2021

Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.

NVD


Products Associated with CVE-2021-28382

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-28382 are published in Zoho Corp Manageengine Key Manager Plus:

 

Exploit Probability

EPSS
19.52%
Percentile
95.27%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.