CVE-2018-8721

Опубликовано: 15 мар. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen

Ссылки

http://www.securityfocus.com/bid/103424
Third Party Advisory
VDB Entry
https://pitstop.manageengine.com/portal/community/topic/manageengine-eventlog-analyzer-11-0-build-11000-stored-cross-site-scripting-attack
Exploit
Issue Tracking
Third Party Advisory
http://www.securityfocus.com/bid/103424
Third Party Advisory
VDB Entry
https://pitstop.manageengine.com/portal/community/topic/manageengine-eventlog-analyzer-11-0-build-11000-stored-cross-site-scripting-attack
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01454

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qm56-55hf-4v9p