Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2020-8838
Disclosure Date: March 23, 2020 (last updated February 21, 2025)
An issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows agent, it does not validate the source and binary downloaded. This allows an attacker on an adjacent network to execute code with NT AUTHORITY/SYSTEM privileges on the agent machines by providing an arbitrary executable via a man-in-the-middle attack.
0
Attacker Value
Unknown
CVE-2019-19034
Disclosure Date: March 23, 2020 (last updated February 21, 2025)
Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM privileges.
0
Attacker Value
Unknown
CVE-2019-12596
Disclosure Date: July 11, 2019 (last updated November 27, 2024)
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.
0
Attacker Value
Unknown
CVE-2019-12597
Disclosure Date: July 11, 2019 (last updated November 27, 2024)
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName.
0
Attacker Value
Unknown
CVE-2019-12537
Disclosure Date: July 11, 2019 (last updated November 27, 2024)
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field.
0
Attacker Value
Unknown
CVE-2019-12595
Disclosure Date: July 11, 2019 (last updated November 27, 2024)
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
0
