Zoho Manageengine Network Configuration Manager
A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `operation` parameter to the "/servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet" API endpoint.