4 matches found
EUVD-2018-10991
Malware in sbrugna...
Code injection
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...
CVE-2018-19288
CVE-2018-19288 : Zoho ManageEngine OpManager 12.3 prior to Build 123223 is vulnerable to a Cross-Site Scripting (XSS) flaw via the updateWidget API. The underlying issue is an XSS payload that can be injected through this API, enabling arbitrary script execution in affected sessions. Documented i...
CVE-2018-19288
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API...