CVE-2019-8929

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2

Description A security issue was found in the Administration zone of the software, specifically in the /netflow/jspui/selectDevice.jsp file. This issue involves XSS that exists in the GET parameters: param and rtype.

Recommendations For Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2, consider restricting access to the vulnerable /netflow/jspui/selectDevice.jsp file until a patch is available. As a temporary workaround, avoid using the param and rtype parameters in the affected API endpoint.