CVE-2019-7422

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2

Description A security issue exists in the Administration zone of the software, specifically in the "/netflow/jspui/addMailSettings.jsp" file. The gF parameter is vulnerable to XSS attacks.

Recommendations For Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2, avoid using the gF parameter in the "/netflow/jspui/addMailSettings.jsp" file until a fix is available. As a temporary workaround, consider restricting access to this file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.