MEDIUM
An issue was discovered in Zoho ManageEngine AssetExplorer
Published Jul 11, 2019
6.1
MEDIUMCVSS 3.1
EPSS 2.17%
Description
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
Affected products
No data.
OR
- 6.5
- 6.5
- 6.5
- 6.5
- 6.5
- 6.5
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://www.securityfocus.com/bid/109364 vdb-entryx_refsource_BIDBroken Link
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4189 Advisory
- https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine x_refsource_MISCExploitThird Party Advisory
- https://www.manageengine.com/products/asset-explorer/sp-readme.html x_refsource_MISCProduct
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/109364 | vdb-entryx_refsource_BIDBroken Link | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4189 | Advisory | |
| https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine | x_refsource_MISCExploitThird Party Advisory | |
| https://www.manageengine.com/products/asset-explorer/sp-readme.html | x_refsource_MISCProduct |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 11, 2019
Updated Aug 4, 2024
Reserved Jun 3, 2019
Link CVE-2019-12595
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data