medium5.4
CVE-2019-16962
Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.
Impact
Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Desktop Central | Version 10.0.430 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.esecforte.com/manage-engine-desktopcentral-india-html-injection-vulnerability/
- https://www.manageengine.com/products/desktop-central/download.html
- https://www.esecforte.com/manage-engine-desktopcentral-india-html-injection-vulnerability/
- https://www.manageengine.com/products/desktop-central/download.html