Vulnerabilities (CVE)

Filtered by vendor Zohocorp Subscribe
Filtered by product Manageengine Assetexplorer
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-12597 1 Zohocorp 1 Manageengine Assetexplorer 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName.
CVE-2019-12596 1 Zohocorp 1 Manageengine Assetexplorer 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.
CVE-2019-12595 1 Zohocorp 1 Manageengine Assetexplorer 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
CVE-2019-12537 1 Zohocorp 1 Manageengine Assetexplorer 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field.
CVE-2018-17596 1 Zohocorp 1 Manageengine Assetexplorer 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.