792 matches found
CVE-2018-20339
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
CVE-2018-20338
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
CVE-2018-20339
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
CVE-2018-20338
CVE-2018-20338 affects Zoho ManageEngine OpManager 12.3 before build 123239, with a SQL injection in the Alarms section. Root cause indicated as insufficient validation of parameters in HTTP requests, enabling a remote attacker to execute arbitrary SQL and potentially access or alter database inf...
CVE-2018-20339
Zoho ManageEngine OpManager 12.3 before build 123239 is affected by a stored XSS in the Notes column of the Alarms section. The vulnerability, documented across multiple sources (including CNVD and CVE entries), allows injection of JavaScript in alarms notes which could lead to session theft or e...
CVE-2018-20339: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...
Zoho ManageEngine OpManager 12.3 Alarms Cross Site Scripting
I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20339 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...
CVE-2018-20338: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...
Zoho ManageEngine OpManager 12.3 Alarms SQL Injection
I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section II. CVE REFERENCE ------------------------- CVE-2018-20338 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...
PT-2018-15316
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows SQL injection in the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version after build...
PT-2018-15317
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before build 123239 Description The issue allows for XSS in the Notes column of the Alarms section. Recommendations For Zoho ManageEngine OpManager version 12.3 before build 123239, update to a version...
CVE-2018-20173
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
CVE-2018-20173
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
Sql injection
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
CVE-2018-20173
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
CVE-2018-20173
Zoho ManageEngine OpManager 12.3 is vulnerable to SQL injection via the getGraphData API in versions before 123238. The root cause is insufficient validation of parameters in the getGraphData call, enabling attackers to manipulate SQL queries. Impact documented across sources includes potential a...
Zoho ManageEngine OpManager 12.3 SQL Injection
I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE ------------------------- CVE-2018-20173 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...
CVE-2018-20173: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API...
Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability
Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE...
PT-2018-15286
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123238 Description The issue allows SQL injection via the "getGraphData API" endpoint. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123238, update to a version that include...