CVE-2018-9163: Improper Neutralization of Input During Web Page Generation

A stored Cross-site scripting XSS vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 Build 5350 allows remote authenticated users with Add New Technician permissions to inject arbitrary web script or HTML via the loginName field to technicianAction.do...

Cross site scripting

In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...

CVE-2018-5799

In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...

CVE-2018-5799

In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...

CVE-2018-5799

The vulnerability CVE-2018-5799 affects Zoho ManageEngine ServiceDesk Plus prior to version 9403, where an XSS flaw allows an attacker to run arbitrary JavaScript via the /api/request/?OPERATION_NAME= URI (SD-69139). The issue stems from insufficient input sanitization in the API endpoint, enabli...

CVE-2018-5799: Improper Neutralization of Input During Web Page Generation

In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...

CVE-2018-8721

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

Cross site scripting

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

Cross site scripting

Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...

CVE-2018-8722

Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...

CVE-2018-8721

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

CVE-2018-8722

CVE-2018-8722 concerns Zoho ManageEngine Desktop Central 9.1.0 build 91099, which is affected by multiple cross-site scripting (XSS) vulnerabilities. The issue is resolved in build 92026. Several connected sources (NVD entry, vulnerability databases, and vendor/IDS references) consistently descri...

CVE-2018-8721

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

CVE-2018-8721

CVE-2018-8721 affects Zoho ManageEngine EventLog Analyzer 11.0 build 11000. The vulnerability is a stored XSS in the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen, allowing an attacker to inject arbitrary HTML/script that executes in a user’s browser. D...

CVE-2018-8722

Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...

PT-2018-18599

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 Description The issue is related to Stored XSS and is associated with the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen. Recommendations F...

CVE-2018-8722: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...

PT-2018-18600

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 9.1.0 build 91099 through 9.1.0 build 92025 Description The issue concerns multiple XSS problems. These issues were fixed in build 92026. Recommendations For Zoho ManageEngine Desktop Central versions...

Zoho ManageEngine EventLog Analyzer Cross-Site Scripting Vulnerability

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. The software is capable of network-wide hosts, servers, network equipment and a variety of application service systems and other generated logs, comprehensive collection and...

Zoho ManageEngine Desktop Central Cross-Site Scripting Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A cross-site scriptin...