CVE-2018-10075

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature.
References
Link Resource
https://www.manageengine.com/products/eventlog/release-notes.html Release Notes Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:11.12:*:*:*:*:*:*:*

Information

Published : 2018-07-02 09:29

Updated : 2018-08-30 09:27


NVD link : CVE-2018-10075

Mitre link : CVE-2018-10075


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

zohocorp

  • manageengine_eventlog_analyzer