Design/Logic Flaw

2019-07-1114:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

48.3%

JSON

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.

CPENameOperatorVersion
manageengine_assetexplorereq6.5
manageengine_assetexplorereq6.5 6500
manageengine_assetexplorereq6.5 6501
manageengine_assetexplorereq6.5 6502
manageengine_assetexplorereq6.5 6503
manageengine_assetexplorereq6.5 6504

Name	Operator	Version
manageengine_assetexplorer	eq	6.5
manageengine_assetexplorer	eq	6.5 6500
manageengine_assetexplorer	eq	6.5 6501
manageengine_assetexplorer	eq	6.5 6502
manageengine_assetexplorer	eq	6.5 6503
manageengine_assetexplorer	eq	6.5 6504