297 matches found
PT-2019-19262
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue exists in the Administration zone of the software. Cross-site scripting XSS is possible in the /netflow/jspui/popup1.jsp file via the bussAlert, customDev, an...
PT-2019-19265
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue was found in the Administration zone of the software, specifically in the /netflow/jspui/selectDevice.jsp file. This issue involves XSS that exists in...
PT-2019-19261
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description An issue allows remote authenticated users to bypass intended SecurityManager restrictions. This is due to an Absolute Path Traversal vulnerability in the Administrati...
PT-2019-19264
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue was found in the software, where a cross-site scripting XSS attack is possible. This occurs in the "/netflow/jspui/userManagementForm.jsp" API endpoin...
CVE-2019-7427
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
CVE-2019-7426
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter...
CVE-2019-7427
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
Cross site scripting
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
Cross site scripting
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter...
CVE-2019-7427
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
CVE-2019-7427
CVE-2019-7427 affects Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2. A stored/reflected XSS exists in the Administration zone, specifically in /netflow/jspui/linkdownalertConfig.jsp, via the autorefTime or graphTypes parameter. NVD reports CVSS-2.0 base score 4.3 (MEDIUM) and CVSS-3.0 ...
CVE-2019-7426
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter...
CVE-2019-7426
CVE-2019-7426 is an XSS vulnerability affecting Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2 in the Administration zone, specifically involving the /netflow/jspui/linkdownalertConfig.jsp parameters groupDesc, groupName, groupID, or task. The connected sources consistently describe a w...
CVE-2019-7426: Improper Neutralization of Input During Web Page Generation
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the groupDesc, groupName, groupID, or task parameter...
PT-2019-18600
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue exists in the Administration zone of the software, specifically in the "/netflow/jspui/linkdownalertConfig.jsp" file. The issue is related to the...
PT-2019-18601
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue exists in the Administration zone of the software, specifically in the "/netflow/jspui/linkdownalertConfig.jsp" file. The autorefTime or graphTypes...
CVE-2019-7427: Improper Neutralization of Input During Web Page Generation
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter...
CVE-2019-7422
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter...