assetexplorer vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4....

Manageengine Assetexplorer It360 Servicedesk Plus Supportcenter1 EDB exploit available1 Metasploit module available1 Github repository available

9

CVSSv2

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code....

Manageengine Assetexplorer It360 Servicedesk Plus Supportcenter

4.3

CVSSv2

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field....

Zohocorp Manageengine Assetexplorer1 Github repository available

4.3

CVSSv2

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter....

Zohocorp Manageengine Assetexplorer1 Github repository available

4.3

CVSSv2

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType....

Zohocorp Manageengine Assetexplorer1 Github repository available

4.3

CVSSv2

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName....

Zohocorp Manageengine Assetexplorer1 Github repository available

4.3

CVSSv2

In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter....

Zohocorp Manageengine Assetexplorer

6.5

CVSSv2

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL....

Zohocorp Manageengine Assetexplorer

6.5

CVSSv2

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter....

Zohocorp Manageengine Assetexplorer

5.5

CVSSv2

Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources....

Zohocorp Manageengine Assetexplorer

1 2 NEXT »