Zohocorp : Security Vulnerabilities, CVEs, Published In 2012 (XSS)
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/Computer_Information/output element.
Max CVSS
4.3
EPSS Score
0.20%
Published
2012-12-11
Updated
2012-12-28
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
Max CVSS
4.3
EPSS Score
4.27%
Published
2012-08-23
Updated
2018-10-09
2 vulnerabilities found