In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATIONNAME= URI, aka SD-69139...
6.1CVSS5.9AI score0.02004EPSS
SaveExploits1References2
OSV•added 2017/02/13 9:59 p.m.•5 views
CVE-2016-8353
An issue was discovered in OSIsoft PI Web API 2015 R2 Version 1.5.1. There is a weakness in this product that may allow an attacker to access the PI system without the proper permissions...
