4 matches found
EUVD-2018-10991
Malware in sbrugna...
6.1CVSS6.3AI score0.02411EPSS
SaveExploits1References3
Code injection
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
4.3CVSS6AI score0.02411EPSS
SaveExploits1References2Affected Software1
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
6.1AI score0.02411EPSS
SaveExploits1References2
CVE-2018-19288
CVE-2018-19288 : Zoho ManageEngine OpManager 12.3 prior to Build 123223 is vulnerable to a Cross-Site Scripting (XSS) flaw via the updateWidget API. The underlying issue is an XSS payload that can be injected through this API, enabling arbitrary script execution in affected sessions. Documented i...
6.1CVSS6AI score0.02411EPSS
SaveExploits1References2Affected Software1
20