CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

CVE-2018-18715

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

CVE-2018-18716: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability...

PT-2018-14594

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to a Self XSS vulnerability. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which i...

PT-2018-14593

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before 123219 Description The issue is related to stored XSS. Recommendations For Zoho ManageEngine OpManager version 12.3 before 123219, update to a version that includes the fix, which is version 1232...

Zoho ManageEngine OpManager 12.3 Cross Site Scripting Vulnerability

Zoho ManageEngine OpManager versions 12.3 before build 123223 have a cross site scripting vulnerability via the updateWidget API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. II. CVE REFERENCE...

CVE-2018-18715: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS...

Code injection

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

CVE-2018-19288

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

CVE-2018-19288

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

CVE-2018-19288: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

PT-2018-14906

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before Build 123223 Description The issue is related to a security problem where an attacker can exploit the updateWidget API to perform a cross-site scripting XSS attack. Recommendations For Zoho...

CVE-2018-18980

An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...

Xxe

An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...

CVE-2018-18980

An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...

CVE-2018-18980

CVE-2018-18980 is an XML External Entity (XXE) vulnerability affecting Zoho ManageEngine Network Configuration Manager and OpManager prior to 12.3.214. The issue arises in the RequestXML parameter processed by a /devices/ProcessRequest.do GET request, which could cause the transmission of local f...

PT-2018-14750

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Network Configuration Manager and OpManager versions prior to 12.3.214 Description A vulnerability exists that allows for XML External Entity injection XXE via the RequestXML parameter in a "/devices/ProcessRequest.do" API...