Security Advisory

CVE-2018-12996

6.1
MEDIUM

Vulnerability Description

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager before 13 (Build 13800) allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do.
Published Date June 29, 2018
Official Source NIST NVD Advisory