CVE-2018-8722

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
6.1MEDIUM
EPSS
1.9%
top 16.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Zohocorp Manageengine Desktop Central
Timeline
PublishedMar 15
Latest updateMay 14

Description

Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-7jm9-3532-243q: Zoho ManageEngine Desktop Central version 9↗2022-05-14
▶
CVEList
CVE-2018-8722: Zoho ManageEngine Desktop Central version 9↗2018-03-15
▶