CVE-2020-15521

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting XSS...

PT-2020-14476

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to 14 build 14730 Description The issue concerns a lack of protection against Cross-site Scripting XSS in the jsp/header.jsp component. Recommendations For versions prior to 14 build 14730,...

CVE-2020-15521: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting XSS...

CVE-2013-5462

IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements...

PT-2013-5556

Name of the Vulnerable Software and Affected Versions IBM Content Navigator versions 2.0.0, 2.0.1 through 2.0.1.2-ICN-FP002, 2.0.2 through 2.0.2.1-ICN-FP001 Description The issue allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements. This is related to the...

CVE-2013-5462: Improper Input Validation

IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements...