Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2019-12994

Disclosure Date: August 08, 2019 (last updated November 27, 2024)
Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL.
0
0
Attacker Value
Unknown

CVE-2019-14693

Disclosure Date: August 08, 2019 (last updated November 27, 2024)
Zoho ManageEngine AssetExplorer 6.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing license XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
0
0
Attacker Value
Unknown

CVE-2018-17596

Disclosure Date: October 02, 2018 (last updated November 27, 2024)
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter.
0
0