PT-2019-19265
CVE-2019-8929
·
تاريخ النشر
2019-05-17
·
تاريخ التحديث
2019-05-17
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2
Description
A security issue was found in the Administration zone of the software, specifically in the /netflow/jspui/selectDevice.jsp file. This issue involves XSS that exists in the GET parameters:
param and rtype.Recommendations
For Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2, consider restricting access to the vulnerable /netflow/jspui/selectDevice.jsp file until a patch is available. As a temporary workaround, avoid using the
param and rtype parameters in the affected API endpoint.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾