CVE-2015-1026: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the (1) technicianSearchText parameter to the Help Desk Technician page or (2) rolesSearchText parameter to the Help Desk Roles.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1026?
CVE-2015-1026 is rated as a high-severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2015-1026?
To mitigate CVE-2015-1026, upgrade to ZOHO ManageEngine ADManager Plus version 6.2 Build 6271 or later.
Which versions of ZOHO ManageEngine ADManager Plus are affected by CVE-2015-1026?
CVE-2015-1026 affects ZOHO ManageEngine ADManager Plus versions prior to 6.2 Build 6270.
What type of vulnerability is CVE-2015-1026?
CVE-2015-1026 is classified as a cross-site scripting (XSS) vulnerability.
Can CVE-2015-1026 lead to data breaches?
Yes, CVE-2015-1026 can enable attackers to inject malicious scripts that may compromise sensitive user data.