CVE-2008-2797: XSS
Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2797?
CVE-2008-2797 has a medium severity level due to its cross-site scripting (XSS) nature.
How do I fix CVE-2008-2797?
To fix CVE-2008-2797, you should validate and sanitize user input for the hostName parameter to prevent script injection.
Which software versions are affected by CVE-2008-2797?
CVE-2008-2797 specifically affects ManageEngine OpUtils version 5.0.
What kind of attack can be executed through CVE-2008-2797?
CVE-2008-2797 allows remote attackers to execute arbitrary web scripts or HTML on affected systems.
Is CVE-2008-2797 a widespread vulnerability?
CVE-2008-2797 is specific to ManageEngine OpUtils 5.0, making it less widespread compared to other vulnerabilities.