medium6.1
CVE-2019-12596
An issue was discovered in Zoho ManageEngine AssetExplorer.
Impact
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Assetexplorer | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/109364
- https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
- https://www.manageengine.com/products/asset-explorer/sp-readme.html
- http://www.securityfocus.com/bid/109364
- https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
- https://www.manageengine.com/products/asset-explorer/sp-readme.html