PT-2018-18600 · Zoho · Zoho Manageengine Desktop Central

Publicado 2018-03-15 · Atualizado 2018-04-06 · CVE-2018-8722

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 9.1.0 build 91099 through 9.1.0 build 92025

Description The issue concerns multiple XSS problems. These issues were fixed in build 92026.

Recommendations For Zoho ManageEngine Desktop Central versions 9.1.0 build 91099 through 9.1.0 build 92025, update to build 92026 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-8722

Produtos afetados

Zoho Manageengine Desktop Central

Referências · 3

• https://manageengine.com/products/desktop-central/cross-site-scripting-vulnerability.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8722 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-8722 · Aviso do Fabricante