3 matches found
Design/Logic Flaw
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...
4.3CVSS6.1AI score0.02549EPSS
SaveExploits2References2Affected Software1
CVE-2018-16965
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...
6.1AI score0.02549EPSS
SaveExploits2References2
CVE-2018-16965: Improper Neutralization of Input During Web Page Generation
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...
6.1CVSS6.3AI score0.02549EPSS
SaveExploits2References2
20