CVE-2014-5103

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

4.3MEDIUM

EPSS

0.4%

top 36.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Zohocorp Manageengine Eventlog Analyzer

Timeline

PublishedJul 25

Latest updateMay 13

Description

Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username parameter to event/j_security_check. Fixed in Version 10 Build 10000.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDzohocorp/manageengine_eventlog_analyzer9.0

🔴Vulnerability Details

GHSA

GHSA-6qgf-q2v9-c8cv: Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or↗2022-05-13

▶

CVEList

CVE-2014-5103: Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or↗2014-07-25

▶