CVE-2019-12596

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-07-11

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Manageengine Assetexplorer (Zohocorp)

References

• http://www.securityfocus.com/bid/109364
• https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine
• https://www.manageengine.com/products/asset-explorer/sp-readme.html