6494 matches found
PT-2018-14906
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before Build 123223 Description The issue is related to a security problem where an attacker can exploit the updateWidget API to perform a cross-site scripting XSS attack. Recommendations For Zoho...
CVE-2018-18980
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
Xxe
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
CVE-2018-18980
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
CVE-2018-18980
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
CVE-2018-18980
CVE-2018-18980 is an XML External Entity (XXE) vulnerability affecting Zoho ManageEngine Network Configuration Manager and OpManager prior to 12.3.214. The issue arises in the RequestXML parameter processed by a /devices/ProcessRequest.do GET request, which could cause the transmission of local f...
CVE-2018-18980: Improper Restriction of XML External Entity Reference
An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...
PT-2018-14750
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager and OpManager versions prior to 12.3.214 Description A vulnerability exists that allows for XML External Entity injection XXE via the RequestXML parameter in a "/devices/ProcessRequest.do" API...
Zoho ManageEngine Network Configuration Manager and OpManager XML External Entity Injection Vulnerability
ZOHO ManageEngine Network Configuration Manager and OpManager are both products of ZOHO Inc. ZOHO ManageEngine Network Configuration Manager is a suite of network configuration management, network change and configuration management NCCM software for configuring switches, routers, firewalls and...
Zoho ManageEngine OpManager SQL Injection Vulnerability (CNVD-2018-22525 )
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A SQL injection vulnerability exists in Zoho ManageEngine OpManager version 123222 prior to 12.3, which can be exploited by an attacker to obtain sensitive information about a database...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
Sql injection
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
CVE-2018-18949
CVE-2018-18949 affects Zoho ManageEngine OpManager 12.3 prior to build 123222. The vulnerability is a SQL injection via Mail Server settings caused by insufficient validation of the mailservername, enabling an attacker to breach the database security context. Impact is described as high/critical ...
PT-2018-14738
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123222 Description The issue is related to SQL Injection via Mail Server settings. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123222, update to a version that includes th...
CVE-2018-18949: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...
Zoho ManageEngine OpManager Cross-Site Scripting Vulnerability (CNVD-2018-22338)
Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A cross-site scripting vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be exploited by attackers to conduct cross-site scripting attacks...