medium6.1
CVE-2020-19554
Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
Impact
Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manageengine | Opmanager | through 12.5.174 |