429 matches found
CVE-2018-18715
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
CVE-2018-18716: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
Zoho ManageEngine OpManager 12.3 Cross Site Scripting Vulnerability
Zoho ManageEngine OpManager versions 12.3 before build 123223 have a cross site scripting vulnerability via the updateWidget API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. II. CVE REFERENCE...
PT-2018-14594
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to a Self XSS vulnerability. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which i...
PT-2018-14593
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to stored XSS. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which is version 1232...
CVE-2018-18715: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
CVE-2018-19288: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
PT-2018-14906
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before Build 123223 Description The issue is related to a security problem where an attacker can exploit the updateWidget API to perform a cross-site scripting XSS attack. Recommendations For Zoho...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
PT-2018-14738
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123222 Description The issue is related to SQL Injection via Mail Server settings. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123222, update to a version that includes th...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
CVE-2018-18475
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
Unrestricted file upload
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...
Zoho ManageEngine OpManager Arbitrary File Upload Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be successfully exploited to allow remote code execution on the target host...
PT-2018-14478
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 build 123214 Description The issue allows for Unrestricted Arbitrary File Upload. Recommendations For versions prior to 12.3 build 123214, update to version 12.3 build 123214 or later to resol...