Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-0344

Properties.do in ZOHO ManageEngine OpStor before build 8500 does not properly check privilege levels, which allows remote authenticated users to obtain Admin access by using the name parameter in conjunction with a true value of the edit parameter.

CVSS 2.0 · 6.5 Medium EPSS 5.8% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Opstor
CVE-2014-2670

Cross-site scripting (XSS) vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter, a different vulnerability than CVE-2014-0344.

CVSS 2.0 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Zohocorp
Products
Manageengine Opstor