ManageEngine AssetExplorer < 5.6.0 Build 5614 XML Asset Data XSS

The version of ManageEngine AssetExplorer running on the remote host is prior to 5.6.0 build 5614. It is, therefore, affected by a cross-site scripting vulnerability in WsDiscoveryServlet due to improper validation of certain XML asset data before returning it to users. An unauthenticated, remote...

ManageEngine Security Manager Plus 5.5 File Disclosure

File disclosure vulnerability in ManageEngine Security Manager f parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2012-5956

Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...

CVE-2012-5956

Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...

CVE-2012-5956

CVE-2012-5956 affects ManageEngine AssetExplorer 5.6 before service pack 5614. The vulnerability is due to cross-site scripting (XSS) in XML asset data submitted to discoveryServlet/WsDiscoveryServlet, with an example in DocRoot/Computer_Information/output. Public sources (NVD, Red Hat/NASL entry...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

ManageEngine Security Manager Plus Detection

The remote web server hosts ManageEngine Security Manager Plus, a web- based network security scanner and patch management software written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63204; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/25";...

ManageEngine Security Manager Plus 'f' Directory Traversal Arbitrary File Access

The installed version of ManageEngine Security Manager Plus fails to sanitize user-supplied input to the 'f' parameter of the 'store' request page before using it to return the contents of a file. An unauthenticated, remote attacker can leverage this issue to retrieve arbitrary files through the...

ManageEngine AssetExplorer fails to properly sanitize XML asset data submission

Overview ManageEngine AssetExplorer version 5.6.0 build number 5610 and possibly older versions is vulnerable to multiple stored XSS vulnerabilities via XML asset data submission. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'ManageEngine...

ManageEngine Applications Manager Default Administrator Credentials

The ManageEngine Applications Manager running on the remote host uses a default set of credentials 'admin' / 'admin' to control access to its management interface. An attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ManageEngine Applications Manager Detection

The remote web server hosts ManageEngine Applications Manager, a web-based server and application performance monitoring software product written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63157; scriptversion"1.5";...

ManageEngine MSPCentral 9 Cross Site Request Forgery / Cross Site Scripting

-------------------------------------------------------------- REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY -------------------------------------------------------------- RA004: Multiple vulnerabilities in ManageEngi...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System:...

ManageEngine ServiceDesk 8.0 Cross Site Scripting

Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

Title: ====== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities Date: ===== 2012-11-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=689 VL-ID: ===== 689 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Manage Engine Exchange Reporter 4.1 Cross Site Scripting

Title: ====== Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=688 VL-ID: ===== 688 Common Vulnerability Scoring System: ==================================== 4.5 Introduction:...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

Document Title: =============== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=689 Release Date: ============= 2012-11-15 Vulnerability Laboratory ID VL-ID: ==================================== 689...

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities

Document Title: =============== ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=689 Release Date: ============= 2012-11-15 Vulnerability Laboratory ID VL-ID: ==================================== 689...

ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities

Document Title: =============== ME Exchange Reporter v4.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=688 Release Date: ============= 2012-11-13 Vulnerability Laboratory ID VL-ID: ==================================== 68...