EUVD-2018-10991

Malware in sbrugna...

Code injection

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

CVE-2018-19288

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

CVE-2018-19288

CVE-2018-19288 : Zoho ManageEngine OpManager 12.3 prior to Build 123223 is vulnerable to a Cross-Site Scripting (XSS) flaw via the updateWidget API. The underlying issue is an XSS payload that can be injected through this API, enabling arbitrary script execution in affected sessions. Documented i...

CVE-2018-19288: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...

PT-2018-14906

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager version 12.3 before Build 123223 Description The issue is related to a security problem where an attacker can exploit the updateWidget API to perform a cross-site scripting XSS attack. Recommendations For Zoho...