CVE-2019-12539

An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is XSS via the SearchN.do search field, a different vulnerability than CVE-2019-12189.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-07-11

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Manageengine Servicedesk Plus (Zohocorp)

References

• https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
• https://www.manageengine.com/products/service-desk/readme.html