6.1

CVE-2018-18716

Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild12300
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123001
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123002
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123003
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123004
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123005
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123006
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123007
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123008
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123009
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123010
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123011
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123012
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123013
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123014
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123015
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123021
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123022
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123023
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123024
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123025
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123026
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123027
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123028
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123029
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123030
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123031
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123032
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123033
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123034
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123035
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123036
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123037
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123043
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123044
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123045
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123046
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123047
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123048
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123049
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123050
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123051
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123052
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123053
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123054
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123055
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123056
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123057
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123062
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123063
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123064
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123065
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123066
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123067
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123068
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123069
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123070
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123076
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123077
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123078
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123079
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123080
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123081
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123082
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123083
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123084
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123086
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123090
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123091
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123092
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123093
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123104
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123105
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123106
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123107
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123108
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123109
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123110
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123111
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123112
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123113
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123114
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123115
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123116
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123117
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123118
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123119
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123120
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123121
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123122
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123123
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123124
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123125
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123126
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123127
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123136
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123137
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123147
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123148
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123149
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123150
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123156
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123157
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123158
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123159
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123160
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123161
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123162
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123163
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123164
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123165
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123166
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123167
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123168
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123169
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123175
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123176
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123177
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123178
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123179
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123180
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123181
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123182
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123183
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123184
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123185
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123186
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123187
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123188
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123189
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123190
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123191
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123192
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123193
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123194
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123195
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123196
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123197
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123198
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123204
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123205
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123206
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123207
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123208
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123214
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123215
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123217
Zohocorp ≫ Manageengine Opmanager Version12.3 Updatebuild123218
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.16% 0.778
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.1 2.8 2.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://seclists.org/fulldisclosure/2018/Nov/6
Third Party Advisory
Mailing List
https://seclists.org/bugtraq/2018/Oct/61
Third Party Advisory
Mailing List