2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...
4.3CVSS6.1AI score0.0409EPSS
SaveExploits0References2Affected Software1
CVE-2012-5956: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...
4.3CVSS5.9AI score0.0409EPSS
SaveExploits0References2
20