CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12996

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager before 13 (Build 13800) allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 79.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-12996

Zohocorp » Manageengine Applications Manager » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.0
Zohocorp » Manageengine Applications Manager » Version: 11.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.1
Zohocorp » Manageengine Applications Manager » Version: 11.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.2
Zohocorp » Manageengine Applications Manager » Version: 11.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.3
Zohocorp » Manageengine Applications Manager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.4
Zohocorp » Manageengine Applications Manager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.5
Zohocorp » Manageengine Applications Manager » Version: 11.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.6
Zohocorp » Manageengine Applications Manager » Version: 11.7

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.7
Zohocorp » Manageengine Applications Manager » Version: 11.8

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.8
Zohocorp » Manageengine Applications Manager » Version: 11.9

cpe:2.3:a:zohocorp:manageengine_applications_manager:11.9
Zohocorp » Manageengine Applications Manager » Version: 12.0

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.0
Zohocorp » Manageengine Applications Manager » Version: 12.1

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.1
Zohocorp » Manageengine Applications Manager » Version: 12.2

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.2
Zohocorp » Manageengine Applications Manager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.3
Zohocorp » Manageengine Applications Manager » Version: 12.4

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.4
Zohocorp » Manageengine Applications Manager » Version: 12.5

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.5
Zohocorp » Manageengine Applications Manager » Version: 12.6

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.6
Zohocorp » Manageengine Applications Manager » Version: 12.7

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.7
Zohocorp » Manageengine Applications Manager » Version: 12.8

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.8
Zohocorp » Manageengine Applications Manager » Version: 12.9

cpe:2.3:a:zohocorp:manageengine_applications_manager:12.9
Zohocorp » Manageengine Applications Manager » Version: 13

cpe:2.3:a:zohocorp:manageengine_applications_manager:13

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12996

Products

Pricing

Contact Us