CVE-2014-3779: XSS
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arbitrary web script or HTML via the name parameter to GroupSubscription.do.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3779?
CVE-2014-3779 has a high severity rating due to its potential for allowing arbitrary script injection through XSS.
How do I fix CVE-2014-3779?
To fix CVE-2014-3779, upgrade ManageEngine ADSelfService Plus to version 5.2 Build 5202 or later.
What is the impact of CVE-2014-3779?
The impact of CVE-2014-3779 includes the possibility for attackers to execute arbitrary scripts in users' browsers.
Is CVE-2014-3779 easy to exploit?
Yes, CVE-2014-3779 is relatively easy to exploit, making it a significant risk for affected systems.
Are there workarounds for CVE-2014-3779 if I can't update?
Workarounds for CVE-2014-3779 include validating and sanitizing user input in the application to prevent script injection.