medium6.1
CVE-2019-11511
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
Impact
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Adselfservice Plus | Version 5.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.manageengine.com/products/self-service-password/release-notes.html#5708
- https://zeroauth.ltd/blog/2019/05/26/cve-2019-11511-zoho-manageengine-adselfservice-plus-xss/
- https://www.manageengine.com/products/self-service-password/release-notes.html#5708
- https://zeroauth.ltd/blog/2019/05/26/cve-2019-11511-zoho-manageengine-adselfservice-plus-xss/