CVEDB API

Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-20485

Zohocorp » Manageengine Adselfservice Plus » Version: 4.5

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5
Zohocorp » Manageengine Adselfservice Plus » Version: 5.0

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0
Zohocorp » Manageengine Adselfservice Plus » Version: 5.1

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1
Zohocorp » Manageengine Adselfservice Plus » Version: 5.2

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2
Zohocorp » Manageengine Adselfservice Plus » Version: 5.3

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3
Zohocorp » Manageengine Adselfservice Plus » Version: 5.4

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.4
Zohocorp » Manageengine Adselfservice Plus » Version: 5.5

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5
Zohocorp » Manageengine Adselfservice Plus » Version: 5.6

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6
Zohocorp » Manageengine Adselfservice Plus » Version: 5.7

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7