CVE-2008-1566
published 2008-03-31CVE-2008-1566: Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML…
PriorityP413medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.02%
59.1th percentile
Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
| manageengine | applications_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8v22-r255-jc2m: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9
ghsa_unreviewed·2022-05-17·CVSS 4.3
CVE-2012-1062 [MEDIUM] CWE-79 GHSA-8v22-r255-jc2m: Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp_Graph.jsp. NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.
GHSA
GHSA-r9w7-3xm2-f9rp: Cross-site scripting (XSS) vulnerability in Search
ghsa_unreviewed·2022-05-01
CVE-2008-1566 [MEDIUM] CWE-79 GHSA-r9w7-3xm2-f9rp: Cross-site scripting (XSS) vulnerability in Search
Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2008-03-31
Published