Search vulnerabilities

Results 26

Export CSV
CVE-2019-12959

Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter.

CVSS 3.0 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
CVE-2019-12596

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.

CVSS 3.1 · 6.1 Medium EPSS 2.2% KEV · Not listed
Vendors
CVE-2018-17596

In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.

CVSS 3.0 · 6.1 Medium EPSS 2.3% KEV · Not listed
Vendors