CVE-2020-27449

2023-08-1100:00:00

mitre

www.cve.org

cve-2020-27449

query report feature

remote attackers

execute arbitrary code

steal cookies

crafted javascript payload

EPSS

0.001

Percentile

48.0%

JSON

Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload.

References

bugbounty.zoho.com/bb/#/bug/101000003619211

www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11002

EPSS

0.001

Percentile

48.0%

JSON

Related for CVELIST:CVE-2020-27449