Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2018-19921

Published: 06/12/2018 Updated: 04/05/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Zohocorp

Vulnerability Summary

Zoho ManageEngine OpManager 12.3 prior to 123237 has XSS in the domain controller.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zohocorp manageengine opmanager 123230

zohocorp manageengine opmanager 123229

zohocorp manageengine opmanager 123224

zohocorp manageengine opmanager 123223

zohocorp manageengine opmanager 123222

zohocorp manageengine opmanager 12.3

zohocorp manageengine opmanager 11.4

zohocorp manageengine opmanager 123231

zohocorp manageengine opmanager 11.5

Exploits

Exploit DB: Zoho ManageEngine OpManager 12.3 Cross Site Scripting
Zoho ManageEngine OpManager version 123 prior to build 123237 has a cross site scripting vulnerability in the domainController API ...

References

CWE-79https://www.manageengine.com/network-monitoring/help/read-me.htmlhttps://nvd.nist.govhttps://packetstormsecurity.com/files/150737/Zoho-ManageEngine-OpManager-12.3-Cross-Site-Scripting.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook