XSS in Manageengine Applications Manager
CVE-2016-9490
ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability. Applications Manager is prone to a Cross-Site Scripting vulnerability in parameter LIMIT, in URL path /Diag…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (75.3th percentile) — read the EPSS interpretation.
Affected products
- Manageengine Applications Manager — versions 12, 13
Weakness classification (CWE)
References
- 20170404 ManageEngine Applications Manager Multiple Vulnerabilities (mailing-list, x_refsource_FULLDISC)
- packetstormsecurity.com/files/142022/ManageEngine-Applications-Manager-12-13-XS… (x_refsource_MISC)
- www.manageengine.com/products/applications_manager/security-updates/security-up… (x_refsource_CONFIRM)
- 97394 (vdb-entry, x_refsource_BID)