NetSight
medium6.1

CVE-2018-19288

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.

Impact

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.

Affected products

VendorProductAffected versions
ZohocorpManageengine Opmanager
Versions 11.4, 11.5, 12.3

Weakness classification

References