Security Advisory

CVE-2018-9163

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-02 12:00:00

Last updated 2024-08-05 07:17:51

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.

← Browse all CVEs View on cve.org ↗