5174 matches found
CVE-2019-7426
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter...
CVE-2019-7427
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
Cross site scripting
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
CVE-2019-7427
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
CVE-2019-7427
CVE-2019-7427 affects Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2. A stored/reflected XSS exists in the Administration zone, specifically in /netflow/jspui/linkdownalertConfig.jsp, via the autorefTime or graphTypes parameter. NVD reports CVSS-2.0 base score 4.3 (MEDIUM) and CVSS-3.0 ...
CVE-2019-7426
CVE-2019-7426 is an XSS vulnerability affecting Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2 in the Administration zone, specifically involving the /netflow/jspui/linkdownalertConfig.jsp parameters groupDesc, groupName, groupID, or task. The connected sources consistently describe a w...
Xxe
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
Sql injection
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection...
Cross site scripting
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks...
CVE-2019-11678
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection...
CVE-2019-11676
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks...
CVE-2019-11678
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection...
CVE-2019-11676
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks...
CVE-2019-11677
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
CVE-2019-11677
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
CVE-2019-11678
The "default reports" feature in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123218 is vulnerable to SQL Injection...
CVE-2019-11678
The CVE-2019-11678 entry concerns Zoho ManageEngine Firewall Analyzer. The issue is a SQL Injection vulnerability in the product’s default reports feature, affecting versions prior to 12.3 Build 123218. Root cause is not elaborated beyond the SQL Injection vector in the affected feature. Impact i...
CVE-2019-11677
The CVE-2019-11677 entry concerns Zoho ManageEngine Firewall Analyzer (pre-12.3 Build 123224). The issue is an XML External Entity (XXE) injection in the Custom Report import function, caused by XML processing vulnerabilities in that component. Documented impact follows the CVSS data: Confidentia...
CVE-2019-11677
The Custom Report import function in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to XML External Entity XXE Injection...
CVE-2019-11676
The vulnerability CVE-2019-11676 affects Zoho ManageEngine Firewall Analyzer prior to 12.3 Build 123224, where the user defined DNS name is vulnerable to stored XSS. Exploitation details are not provided in the documents; impact is stored XSS with affected input handling. No remediation specifics...