CVE-2019-8928

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userName...

CVE-2019-8926

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource...

CVE-2019-8929

The CVE-2019-8929 entry affects Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. It describes a stored/reflective cross-site scripting (XSS) vulnerability in the Administration zone, specifically in the /netflow/jspui/selectDevice.jsp page, exploitable via the GET parameters param and rty...

CVE-2019-8928

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userName...

CVE-2019-8927

Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 is affected by an XSS vulnerability in the Adminstration zone (/netflow/jspui/scheduleConfig.jsp) via multiple GET parameters (devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, rep_schedule, rep_Type, schDesc, s...

CVE-2019-8926

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource...

CVE-2019-8926

CVE-2019-8926 affects Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. The vulnerability is a reflected cross-site scripting (XSS) in the Admin zone, specifically in /netflow/jspui/popup1.jsp, exploitable via GET parameters bussAlert, customDev, and selSource. The technical details in con...

CVE-2019-8925

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet via the parameter schFilePath, allows remote authenticated users to bypass intended SecurityManager...

Path traversal

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet via the parameter schFilePath, allows remote authenticated users to bypass intended SecurityManager...

CVE-2019-8925

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet via the parameter schFilePath, allows remote authenticated users to bypass intended SecurityManager...

CVE-2019-8929: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype...

CVE-2019-8926: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/popup1.jsp file via these GET parameters: bussAlert, customDev, and selSource...

CVE-2019-8928: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in /netflow/jspui/userManagementForm.jsp via these GET parameters: authMeth, passWord, pwd1, and userName...

PT-2019-19261

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue allows remote authenticated users to bypass intended SecurityManager restrictions. This is due to an Absolute Path Traversal vulnerability in the Administrati...

PT-2019-19262

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue exists in the Administration zone of the software. Cross-site scripting XSS is possible in the /netflow/jspui/popup1.jsp file via the bussAlert, customDev, an...

CVE-2019-8925: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /netflow/servlet/CReportPDFServlet via the parameter schFilePath, allows remote authenticated users to bypass intended SecurityManager...

PT-2019-19263

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue exists in the Administration zone of the software. Cross-site scripting XSS is possible in the /netflow/jspui/scheduleConfig.jsp file via several GET...

PT-2019-19264

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue was found in the software, where a cross-site scripting XSS attack is possible. This occurs in the "/netflow/jspui/userManagementForm.jsp" API endpoin...

PT-2019-19265

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue was found in the Administration zone of the software, specifically in the /netflow/jspui/selectDevice.jsp file. This issue involves XSS that exists in...

CVE-2019-8927: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/scheduleConfig.jsp file via these GET parameters: devSrc, emailId, excWeekModify, filterFlag, getFilter, mailReport, mset, popup, repschedule, repType, schDesc,...