6494 matches found
Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)
An arbitrary file deletion vulnerability exists in Zoho ManageEngine Desktop Central. The vulnerability is due to insufficient input validation in requests handled by AgentTrayIconServlet...
CVE-2018-18715
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
CVE-2018-18715
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
Cross site scripting
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
Cross site scripting
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
CVE-2018-18716
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
CVE-2018-18716
CVE-2018-18716 affects Zoho ManageEngine OpManager 12.3 before 123219, with a Self XSS vulnerability in OpManager’s web interface. Connected CNVD/CVE records corroborate a Cross-Site Scripting issue for OpManager 12.3. The documents do not specify exact exploit steps, vectors beyond the self-XSS ...
Zoho ManageEngine OpManager 12.3 Cross Site Scripting Vulnerability
Zoho ManageEngine OpManager versions 12.3 before build 123223 have a cross site scripting vulnerability via the updateWidget API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. II. CVE REFERENCE...
CVE-2018-18716: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...
CVE-2018-18715: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...
PT-2018-14594
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to a Self XSS vulnerability. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which i...
PT-2018-14593
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to stored XSS. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which is version 1232...
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
Code injection
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
CVE-2018-19288
CVE-2018-19288 : Zoho ManageEngine OpManager 12.3 prior to Build 123223 is vulnerable to a Cross-Site Scripting (XSS) flaw via the updateWidget API. The underlying issue is an XSS payload that can be injected through this API, enabling arbitrary script execution in affected sessions. Documented i...