Lucene search

[email protected]CVE-2018-18716

HistoryNov 20, 2018 - 7:29 p.m.

CVE-2018-18716

2018-11-2019:29:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2018-18716

zoho

manageengine

opmanager

self xss

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

62.0%

JSON

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.

Affected configurations

NVD

Node

zohocorpmanageengine_opmanagerMatch11.4

zohocorpmanageengine_opmanagerMatch11.5

zohocorpmanageengine_opmanagerMatch12.3

zohocorpmanageengine_opmanagerMatch12.3build12300

zohocorpmanageengine_opmanagerMatch12.3build123001

zohocorpmanageengine_opmanagerMatch12.3build123002

zohocorpmanageengine_opmanagerMatch12.3build123003

zohocorpmanageengine_opmanagerMatch12.3build123004

zohocorpmanageengine_opmanagerMatch12.3build123005

zohocorpmanageengine_opmanagerMatch12.3build123006

zohocorpmanageengine_opmanagerMatch12.3build123007

zohocorpmanageengine_opmanagerMatch12.3build123008

zohocorpmanageengine_opmanagerMatch12.3build123009

zohocorpmanageengine_opmanagerMatch12.3build123010

zohocorpmanageengine_opmanagerMatch12.3build123011

zohocorpmanageengine_opmanagerMatch12.3build123012

zohocorpmanageengine_opmanagerMatch12.3build123013

zohocorpmanageengine_opmanagerMatch12.3build123014

zohocorpmanageengine_opmanagerMatch12.3build123015

zohocorpmanageengine_opmanagerMatch12.3build123021

zohocorpmanageengine_opmanagerMatch12.3build123022

zohocorpmanageengine_opmanagerMatch12.3build123023

zohocorpmanageengine_opmanagerMatch12.3build123024

zohocorpmanageengine_opmanagerMatch12.3build123025

zohocorpmanageengine_opmanagerMatch12.3build123026

zohocorpmanageengine_opmanagerMatch12.3build123027

zohocorpmanageengine_opmanagerMatch12.3build123028

zohocorpmanageengine_opmanagerMatch12.3build123029

zohocorpmanageengine_opmanagerMatch12.3build123030

zohocorpmanageengine_opmanagerMatch12.3build123031

zohocorpmanageengine_opmanagerMatch12.3build123032

zohocorpmanageengine_opmanagerMatch12.3build123033

zohocorpmanageengine_opmanagerMatch12.3build123034

zohocorpmanageengine_opmanagerMatch12.3build123035

zohocorpmanageengine_opmanagerMatch12.3build123036

zohocorpmanageengine_opmanagerMatch12.3build123037

zohocorpmanageengine_opmanagerMatch12.3build123043

zohocorpmanageengine_opmanagerMatch12.3build123044

zohocorpmanageengine_opmanagerMatch12.3build123045

zohocorpmanageengine_opmanagerMatch12.3build123046

zohocorpmanageengine_opmanagerMatch12.3build123047

zohocorpmanageengine_opmanagerMatch12.3build123048

zohocorpmanageengine_opmanagerMatch12.3build123049

zohocorpmanageengine_opmanagerMatch12.3build123050

zohocorpmanageengine_opmanagerMatch12.3build123051

zohocorpmanageengine_opmanagerMatch12.3build123052

zohocorpmanageengine_opmanagerMatch12.3build123053

zohocorpmanageengine_opmanagerMatch12.3build123054

zohocorpmanageengine_opmanagerMatch12.3build123055

zohocorpmanageengine_opmanagerMatch12.3build123056

zohocorpmanageengine_opmanagerMatch12.3build123057

zohocorpmanageengine_opmanagerMatch12.3build123062

zohocorpmanageengine_opmanagerMatch12.3build123063

zohocorpmanageengine_opmanagerMatch12.3build123064

zohocorpmanageengine_opmanagerMatch12.3build123065

zohocorpmanageengine_opmanagerMatch12.3build123066

zohocorpmanageengine_opmanagerMatch12.3build123067

zohocorpmanageengine_opmanagerMatch12.3build123068

zohocorpmanageengine_opmanagerMatch12.3build123069

zohocorpmanageengine_opmanagerMatch12.3build123070

zohocorpmanageengine_opmanagerMatch12.3build123076

zohocorpmanageengine_opmanagerMatch12.3build123077

zohocorpmanageengine_opmanagerMatch12.3build123078

zohocorpmanageengine_opmanagerMatch12.3build123079

zohocorpmanageengine_opmanagerMatch12.3build123080

zohocorpmanageengine_opmanagerMatch12.3build123081

zohocorpmanageengine_opmanagerMatch12.3build123082

zohocorpmanageengine_opmanagerMatch12.3build123083

zohocorpmanageengine_opmanagerMatch12.3build123084

zohocorpmanageengine_opmanagerMatch12.3build123086

zohocorpmanageengine_opmanagerMatch12.3build123090

zohocorpmanageengine_opmanagerMatch12.3build123091

zohocorpmanageengine_opmanagerMatch12.3build123092

zohocorpmanageengine_opmanagerMatch12.3build123093

zohocorpmanageengine_opmanagerMatch12.3build123104

zohocorpmanageengine_opmanagerMatch12.3build123105

zohocorpmanageengine_opmanagerMatch12.3build123106

zohocorpmanageengine_opmanagerMatch12.3build123107

zohocorpmanageengine_opmanagerMatch12.3build123108

zohocorpmanageengine_opmanagerMatch12.3build123109

zohocorpmanageengine_opmanagerMatch12.3build123110

zohocorpmanageengine_opmanagerMatch12.3build123111

zohocorpmanageengine_opmanagerMatch12.3build123112

zohocorpmanageengine_opmanagerMatch12.3build123113

zohocorpmanageengine_opmanagerMatch12.3build123114

zohocorpmanageengine_opmanagerMatch12.3build123115

zohocorpmanageengine_opmanagerMatch12.3build123116

zohocorpmanageengine_opmanagerMatch12.3build123117

zohocorpmanageengine_opmanagerMatch12.3build123118

zohocorpmanageengine_opmanagerMatch12.3build123119

zohocorpmanageengine_opmanagerMatch12.3build123120

zohocorpmanageengine_opmanagerMatch12.3build123121

zohocorpmanageengine_opmanagerMatch12.3build123122

zohocorpmanageengine_opmanagerMatch12.3build123123

zohocorpmanageengine_opmanagerMatch12.3build123124

zohocorpmanageengine_opmanagerMatch12.3build123125

zohocorpmanageengine_opmanagerMatch12.3build123126

zohocorpmanageengine_opmanagerMatch12.3build123127

zohocorpmanageengine_opmanagerMatch12.3build123136

zohocorpmanageengine_opmanagerMatch12.3build123137

zohocorpmanageengine_opmanagerMatch12.3build123147

zohocorpmanageengine_opmanagerMatch12.3build123148

zohocorpmanageengine_opmanagerMatch12.3build123149

zohocorpmanageengine_opmanagerMatch12.3build123150

zohocorpmanageengine_opmanagerMatch12.3build123156

zohocorpmanageengine_opmanagerMatch12.3build123157

zohocorpmanageengine_opmanagerMatch12.3build123158

zohocorpmanageengine_opmanagerMatch12.3build123159

zohocorpmanageengine_opmanagerMatch12.3build123160

zohocorpmanageengine_opmanagerMatch12.3build123161

zohocorpmanageengine_opmanagerMatch12.3build123162

zohocorpmanageengine_opmanagerMatch12.3build123163

zohocorpmanageengine_opmanagerMatch12.3build123164

zohocorpmanageengine_opmanagerMatch12.3build123165

zohocorpmanageengine_opmanagerMatch12.3build123166

zohocorpmanageengine_opmanagerMatch12.3build123167

zohocorpmanageengine_opmanagerMatch12.3build123168

zohocorpmanageengine_opmanagerMatch12.3build123169

zohocorpmanageengine_opmanagerMatch12.3build123175

zohocorpmanageengine_opmanagerMatch12.3build123176

zohocorpmanageengine_opmanagerMatch12.3build123177

zohocorpmanageengine_opmanagerMatch12.3build123178

zohocorpmanageengine_opmanagerMatch12.3build123179

zohocorpmanageengine_opmanagerMatch12.3build123180

zohocorpmanageengine_opmanagerMatch12.3build123181

zohocorpmanageengine_opmanagerMatch12.3build123182

zohocorpmanageengine_opmanagerMatch12.3build123183

zohocorpmanageengine_opmanagerMatch12.3build123184

zohocorpmanageengine_opmanagerMatch12.3build123185

zohocorpmanageengine_opmanagerMatch12.3build123186

zohocorpmanageengine_opmanagerMatch12.3build123187

zohocorpmanageengine_opmanagerMatch12.3build123188

zohocorpmanageengine_opmanagerMatch12.3build123189

zohocorpmanageengine_opmanagerMatch12.3build123190

zohocorpmanageengine_opmanagerMatch12.3build123191

zohocorpmanageengine_opmanagerMatch12.3build123192

zohocorpmanageengine_opmanagerMatch12.3build123193

zohocorpmanageengine_opmanagerMatch12.3build123194

zohocorpmanageengine_opmanagerMatch12.3build123195

zohocorpmanageengine_opmanagerMatch12.3build123196

zohocorpmanageengine_opmanagerMatch12.3build123197

zohocorpmanageengine_opmanagerMatch12.3build123198

zohocorpmanageengine_opmanagerMatch12.3build123204

zohocorpmanageengine_opmanagerMatch12.3build123205

zohocorpmanageengine_opmanagerMatch12.3build123206

zohocorpmanageengine_opmanagerMatch12.3build123207

zohocorpmanageengine_opmanagerMatch12.3build123208

zohocorpmanageengine_opmanagerMatch12.3build123214

zohocorpmanageengine_opmanagerMatch12.3build123215

zohocorpmanageengine_opmanagerMatch12.3build123217

zohocorpmanageengine_opmanagerMatch12.3build123218

CPENameOperatorVersion
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagereq11.4
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagereq11.5
zohocorp:manageengine_opmanagerzohocorp manageengine opmanagereq12.3

CPE	Name	Operator	Version
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	eq	11.4
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	eq	11.5
zohocorp:manageengine_opmanager	zohocorp manageengine opmanager	eq	12.3

References

packetstormsecurity.com/files/150124/Zoho-ManageEngine-OpManager-12.3-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2018/Nov/6

seclists.org/bugtraq/2018/Oct/61

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

62.0%

JSON

Related for CVE-2018-18716

cvelist1 nvd1 prion1