Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen.
References
| Link | Resource |
|---|---|
| https://www.exploit-db.com/exploits/45254/ | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2018-08-28 19:29
Updated : 2020-08-24 17:37
NVD link : CVE-2018-15608
Mitre link : CVE-2018-15608
JSON object : View
Products Affected
manageengine
- admanager_plus
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
