← volver
CVE-2018-12996

CVE-2018-12996

EPSS 3.5%
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager before 13 (Build 13800) allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://packetstormsecurity.com/files/148635/Zoho-ManageEngine-13-13790-build-XSS-File-Read-File-Deletion.htmlhttp://seclists.org/fulldisclosure/2018/Jul/71https://github.com/unh3x/just4cve/issues/7https://www.manageengine.com/products/applications_manager/issues.htmlhttps://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-12996.htmlhttp://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201807-038