CVE-2018-12998

A reflected Cross-site scripting (XSS) vulnerability exists in multiple Zoho ManageEngine products, including Netflow Analyzer (before build 123137), Network Configuration Manager (before build 123128), OpManager (before build 123148), OpUtils (before build 123161), and Firewall Analyzer (before ...

CVE-2018-12997

CVE-2018-12997 affects Zoho ManageEngine products: NetFlow Analyzer, Network Configuration Manager, OpManager, OpUtils, and Firewall Analyzer. The underlying issue is an Incorrect Access Control in FailOverHelperServlet, allowing unauthenticated attackers to read arbitrary server files by sending...