PT-2018-15286

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123238 Description The issue allows SQL injection via the "getGraphData API" endpoint. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123238, update to a version that include...

Zoho ManageEngine OpManager 12.3 Cross Site Scripting

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123237 has XSS via the domainController API. II. CVE REFERENCE ------------------------- CVE-2018-19921 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE ------------------------...

ZOHO ManageEngine OpManager domain controller cross-site scripting vulnerability

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. domain controller is one of the domain controller components. A cross-site scripting vulnerability exists in the domain controller in versions prior to ZOHO ManageEngine OpManager 12.3 Build...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

Design/Logic Flaw

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921

CVE-2018-19921 affects Zoho ManageEngine OpManager 12.3 before build 123237. A cross-site scripting (XSS) flaw exists in the domain controller component, exposed via the domainController API. Exploitation could enable a remote attacker to inject script or HTML, potentially compromising user sessi...

CVE-2018-19921

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

CVE-2018-19921: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller...

PT-2018-15165

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123237 Description The issue concerns a cross-site scripting XSS flaw in the domain controller of the affected software. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123237...

Zoho ManageEngine OpManager oputilsServlet Authentication Bypass (CVE-2018-17283)

An authentication bypass vulnerability exists in ManageEngine OpManager. The vulnerability is due to lack of access control of /oputilsServlet?action=getAPIKey method...

CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

CVE-2018-18715

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

CVE-2018-18715

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

CVE-2018-18715

CVE-2018-18715 affects Zoho ManageEngine OpManager 12.3 before build 123219, where a stored cross-site scripting (XSS) vulnerability exists in the web interface. The connected documents confirm the defect as a stored XSS, but do not provide details on affected modules, versions beyond 12.3, explo...

CVE-2018-18715

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...