← voltar
CVE-2018-12996

CVE-2018-12996

EPSS 3.5%
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager before 13 (Build 13800) allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://packetstormsecurity.com/files/148635/Zoho-ManageEngine-13-13790-build-XSS-File-Read-File-Deletion.htmlhttp://seclists.org/fulldisclosure/2018/Jul/71https://github.com/unh3x/just4cve/issues/7https://www.manageengine.com/products/applications_manager/issues.htmlhttps://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-12996.htmlhttp://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201807-038