NVD

Id
26331  
Name
CVE-2015-5061  
Description
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-06-24  
Modified Date
2016-12-07  
Seq
2015-5061  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139250 26331 CVE-2015-5061 75411  View
139251 26331 CVE-2015-5061 http://www.vulnerability-lab.com/get_content.php?id=1488  View
139252 26331 CVE-2015-5061 https://packetstormsecurity.com/files/132402/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7939 JVNDB-2015-003259 Zoho ManageEngine AssetExplorer におけるクロスサイトスクリプティングの脆弱性 Zoho ManageEngine AssetExplorer には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-5061 82286 CVE-2015-5061 26331 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003259.html 2015-06-22 2015-06-25 View