PT-2018-18600 · Zoho · Zoho Manageengine Desktop Central

Published 2018-03-15 · Updated 2018-04-06 · CVE-2018-8722

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 9.1.0 build 91099 through 9.1.0 build 92025

Description The issue concerns multiple XSS problems. These issues were fixed in build 92026.

Recommendations For Zoho ManageEngine Desktop Central versions 9.1.0 build 91099 through 9.1.0 build 92025, update to build 92026 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-8722

Affected Products

Zoho Manageengine Desktop Central

References · 3

• https://manageengine.com/products/desktop-central/cross-site-scripting-vulnerability.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8722 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8722 · Vendor Advisory