Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.
Search vulnerabilities
CVE-2019-12959
CVSS 3.0 · 8.8 High
EPSS 3.1%
KEV · Not listed
Vendors
Products
CVE-2019-12597
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName.
CVSS 3.1 · 6.1 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2019-12596
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.
CVSS 3.1 · 6.1 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2019-12595
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
CVSS 3.1 · 6.1 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2019-12537
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field.
CVSS 3.1 · 6.1 Medium
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2018-17596
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.
CVSS 3.0 · 6.1 Medium
EPSS 2.3%
KEV · Not listed
Vendors
Products