zohocorp firewall-analyzer CVE-2018-12998 vulnerability in Zoho Corp Products
Published on June 29, 2018

A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote attackers to inject arbitrary web script or HTML via the parameter 'operation' to /servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.

NVD


Products Associated with CVE-2018-12998

Want to know whenever a new CVE is published for Zoho Corp products? stack.watch will email you.

Zoho Corp Firewall Analyzer
 
Zoho Corp Manageengine Netflow Analyzer
 
Zoho Corp Network Configuration Manager
 
Zoho Corp Opmanager
 
Zoho Corp Oputils
 
Zoho Corp Manageengine Opmanager
 
Zoho Corp Manageengine Oputils
 
Zoho Corp Manageengine Network Configuration Manager
 

Exploit Probability

EPSS
47.66%
Percentile
97.66%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.