6.1

CVE-2020-15521

Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update -
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14000
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14010
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14020
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14030
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14040
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14050
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14060
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14070
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14071
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14072
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14073
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14080
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14090
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14100
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14110
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14120
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14130
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14140
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14150
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14160
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14170
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14180
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14190
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14200
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14210
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14220
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14230
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14240
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14250
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14260
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14261
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14262
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14270
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14280
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14290
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14300
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14310
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14330
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14331
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14332
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14340
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14350
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14360
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14361
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14370
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14380
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14390
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14400
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14401
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14410
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14420
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14430
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14440
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14450
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14460
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14470
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14480
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14490
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14500
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14510
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14520
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14530
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14531
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14532
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14533
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14540
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14550
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14560
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14570
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14580
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14590
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14600
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14610
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14620
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14630
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14660
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14670
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14681
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14682
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14683
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14684
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14685
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14690
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14700
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14710
Zohocorp ≫ Manageengine Applications Manager Version 14.0 Update build14720
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.741
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.manageengine.com
Product
https://www.manageengine.com/products/applications_manager/issues.html#v14730
Vendor Advisory