Zoho ManageEngine OpManager cross-site scripting vulnerability (CNVD-2018-26472)

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A cross-site scripting vulnerability exists in the Notes column of the Alarms section in versions prior to ZOHO ManageEngine OpManager 12.3 build 123239. A remote attacker can exploit this...

CVE-2018-20338

Zoho ManageEngine OpManager 12.3 before build 123239 allows SQL injection in the Alarms section...

CVE-2018-20339

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section...