CVEDB API

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.024

EPSS Ranking 84.0%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-19921

Zohocorp » Manageengine Opmanager » Version: 11.4

cpe:2.3:a:zohocorp:manageengine_opmanager:11.4
Zohocorp » Manageengine Opmanager » Version: 11.5

cpe:2.3:a:zohocorp:manageengine_opmanager:11.5
Zohocorp » Manageengine Opmanager » Version: 12.3

cpe:2.3:a:zohocorp:manageengine_opmanager:12.3
Zohocorp » Manageengine Opmanager » Version: 123222

cpe:2.3:a:zohocorp:manageengine_opmanager:123222
Zohocorp » Manageengine Opmanager » Version: 123223

cpe:2.3:a:zohocorp:manageengine_opmanager:123223
Zohocorp » Manageengine Opmanager » Version: 123224

cpe:2.3:a:zohocorp:manageengine_opmanager:123224
Zohocorp » Manageengine Opmanager » Version: 123229

cpe:2.3:a:zohocorp:manageengine_opmanager:123229
Zohocorp » Manageengine Opmanager » Version: 123230

cpe:2.3:a:zohocorp:manageengine_opmanager:123230
Zohocorp » Manageengine Opmanager » Version: 123231

cpe:2.3:a:zohocorp:manageengine_opmanager:123231