CVE-2018-15608

CVE-2018-15608 affects Zoho ManageEngine ADManager Plus 6.5.7. The issue is HTML Injection on the AD Delegation → Help Desk Technicians screen, indicating user-supplied input could be reflected and interpreted as markup in that UI. The connected documents confirm the vulnerability type as HTML In...

CVE-2012-1049

CVE-2012-1049 affects ManageEngine ADManager Plus 5.2 (Build 5210). The vulnerability is multiple cross-site scripting (XSS) flaws triggered by user input in the jsp/AddDC.jsp domainName parameter and in DomainConfig.do operation parameter, allowing arbitrary HTML/script execution in a victim’s b...