CVE-2018-19288

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-11-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Manageengine Opmanager (Zohocorp)

References

• http://www.securityfocus.com/bid/105960
• https://www.manageengine.com/network-monitoring/help/read-me.html