CVE-2018-19921: XSS

Published Dec 6, 2018
·
Updated

Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.

Affected Software

160 affected components
ZohoCorp ManageEngine OpManager=11.4
ZohoCorp ManageEngine OpManager=11.5
ZohoCorp ManageEngine OpManager=12.3
ZohoCorp ManageEngine OpManager=12.3-build12300
ZohoCorp ManageEngine OpManager=12.3-build123001
ZohoCorp ManageEngine OpManager=12.3-build123002
ZohoCorp ManageEngine OpManager=12.3-build123003
ZohoCorp ManageEngine OpManager=12.3-build123004
ZohoCorp ManageEngine OpManager=12.3-build123005
ZohoCorp ManageEngine OpManager=12.3-build123006
ZohoCorp ManageEngine OpManager=12.3-build123007
ZohoCorp ManageEngine OpManager=12.3-build123008
ZohoCorp ManageEngine OpManager=12.3-build123009
ZohoCorp ManageEngine OpManager=12.3-build123010
ZohoCorp ManageEngine OpManager=12.3-build123011
ZohoCorp ManageEngine OpManager=12.3-build123012
ZohoCorp ManageEngine OpManager=12.3-build123013
ZohoCorp ManageEngine OpManager=12.3-build123014
ZohoCorp ManageEngine OpManager=12.3-build123015
ZohoCorp ManageEngine OpManager=12.3-build123021
ZohoCorp ManageEngine OpManager=12.3-build123022
ZohoCorp ManageEngine OpManager=12.3-build123023
ZohoCorp ManageEngine OpManager=12.3-build123024
ZohoCorp ManageEngine OpManager=12.3-build123025
ZohoCorp ManageEngine OpManager=12.3-build123026
ZohoCorp ManageEngine OpManager=12.3-build123027
ZohoCorp ManageEngine OpManager=12.3-build123028
ZohoCorp ManageEngine OpManager=12.3-build123029
ZohoCorp ManageEngine OpManager=12.3-build123030
ZohoCorp ManageEngine OpManager=12.3-build123031
ZohoCorp ManageEngine OpManager=12.3-build123032
ZohoCorp ManageEngine OpManager=12.3-build123033
ZohoCorp ManageEngine OpManager=12.3-build123034
ZohoCorp ManageEngine OpManager=12.3-build123035
ZohoCorp ManageEngine OpManager=12.3-build123036
ZohoCorp ManageEngine OpManager=12.3-build123037
ZohoCorp ManageEngine OpManager=12.3-build123043
ZohoCorp ManageEngine OpManager=12.3-build123044
ZohoCorp ManageEngine OpManager=12.3-build123045
ZohoCorp ManageEngine OpManager=12.3-build123046
ZohoCorp ManageEngine OpManager=12.3-build123047
ZohoCorp ManageEngine OpManager=12.3-build123048
ZohoCorp ManageEngine OpManager=12.3-build123049
ZohoCorp ManageEngine OpManager=12.3-build123050
ZohoCorp ManageEngine OpManager=12.3-build123051
ZohoCorp ManageEngine OpManager=12.3-build123052
ZohoCorp ManageEngine OpManager=12.3-build123053
ZohoCorp ManageEngine OpManager=12.3-build123054
ZohoCorp ManageEngine OpManager=12.3-build123055
ZohoCorp ManageEngine OpManager=12.3-build123056
ZohoCorp ManageEngine OpManager=12.3-build123057
ZohoCorp ManageEngine OpManager=12.3-build123062
ZohoCorp ManageEngine OpManager=12.3-build123063
ZohoCorp ManageEngine OpManager=12.3-build123064
ZohoCorp ManageEngine OpManager=12.3-build123065
ZohoCorp ManageEngine OpManager=12.3-build123066
ZohoCorp ManageEngine OpManager=12.3-build123067
ZohoCorp ManageEngine OpManager=12.3-build123068
ZohoCorp ManageEngine OpManager=12.3-build123069
ZohoCorp ManageEngine OpManager=12.3-build123070
ZohoCorp ManageEngine OpManager=12.3-build123076
ZohoCorp ManageEngine OpManager=12.3-build123077
ZohoCorp ManageEngine OpManager=12.3-build123078
ZohoCorp ManageEngine OpManager=12.3-build123079
ZohoCorp ManageEngine OpManager=12.3-build123080
ZohoCorp ManageEngine OpManager=12.3-build123081
ZohoCorp ManageEngine OpManager=12.3-build123082
ZohoCorp ManageEngine OpManager=12.3-build123083
ZohoCorp ManageEngine OpManager=12.3-build123084
ZohoCorp ManageEngine OpManager=12.3-build123086
ZohoCorp ManageEngine OpManager=12.3-build123090
ZohoCorp ManageEngine OpManager=12.3-build123091
ZohoCorp ManageEngine OpManager=12.3-build123092
ZohoCorp ManageEngine OpManager=12.3-build123093
ZohoCorp ManageEngine OpManager=12.3-build123104
ZohoCorp ManageEngine OpManager=12.3-build123105
ZohoCorp ManageEngine OpManager=12.3-build123106
ZohoCorp ManageEngine OpManager=12.3-build123107
ZohoCorp ManageEngine OpManager=12.3-build123108
ZohoCorp ManageEngine OpManager=12.3-build123109
ZohoCorp ManageEngine OpManager=12.3-build123110
ZohoCorp ManageEngine OpManager=12.3-build123111
ZohoCorp ManageEngine OpManager=12.3-build123112
ZohoCorp ManageEngine OpManager=12.3-build123113
ZohoCorp ManageEngine OpManager=12.3-build123114
ZohoCorp ManageEngine OpManager=12.3-build123115
ZohoCorp ManageEngine OpManager=12.3-build123116
ZohoCorp ManageEngine OpManager=12.3-build123117
ZohoCorp ManageEngine OpManager=12.3-build123118
ZohoCorp ManageEngine OpManager=12.3-build123119
ZohoCorp ManageEngine OpManager=12.3-build123120
ZohoCorp ManageEngine OpManager=12.3-build123121
ZohoCorp ManageEngine OpManager=12.3-build123122
ZohoCorp ManageEngine OpManager=12.3-build123123
ZohoCorp ManageEngine OpManager=12.3-build123124
ZohoCorp ManageEngine OpManager=12.3-build123125
ZohoCorp ManageEngine OpManager=12.3-build123126
ZohoCorp ManageEngine OpManager=12.3-build123127
ZohoCorp ManageEngine OpManager=12.3-build123136
ZohoCorp ManageEngine OpManager=12.3-build123137
ZohoCorp ManageEngine OpManager=12.3-build123147
ZohoCorp ManageEngine OpManager=12.3-build123148
ZohoCorp ManageEngine OpManager=12.3-build123149
ZohoCorp ManageEngine OpManager=12.3-build123150
ZohoCorp ManageEngine OpManager=12.3-build123156
ZohoCorp ManageEngine OpManager=12.3-build123157
ZohoCorp ManageEngine OpManager=12.3-build123158
ZohoCorp ManageEngine OpManager=12.3-build123159
ZohoCorp ManageEngine OpManager=12.3-build123160
ZohoCorp ManageEngine OpManager=12.3-build123161
ZohoCorp ManageEngine OpManager=12.3-build123162
ZohoCorp ManageEngine OpManager=12.3-build123163
ZohoCorp ManageEngine OpManager=12.3-build123164
ZohoCorp ManageEngine OpManager=12.3-build123165
ZohoCorp ManageEngine OpManager=12.3-build123166
ZohoCorp ManageEngine OpManager=12.3-build123167
ZohoCorp ManageEngine OpManager=12.3-build123168
ZohoCorp ManageEngine OpManager=12.3-build123169
ZohoCorp ManageEngine OpManager=12.3-build123175
ZohoCorp ManageEngine OpManager=12.3-build123176
ZohoCorp ManageEngine OpManager=12.3-build123177
ZohoCorp ManageEngine OpManager=12.3-build123178
ZohoCorp ManageEngine OpManager=12.3-build123179
ZohoCorp ManageEngine OpManager=12.3-build123180
ZohoCorp ManageEngine OpManager=12.3-build123181
ZohoCorp ManageEngine OpManager=12.3-build123182
ZohoCorp ManageEngine OpManager=12.3-build123183
ZohoCorp ManageEngine OpManager=12.3-build123184
ZohoCorp ManageEngine OpManager=12.3-build123185
ZohoCorp ManageEngine OpManager=12.3-build123186
ZohoCorp ManageEngine OpManager=12.3-build123187
ZohoCorp ManageEngine OpManager=12.3-build123188
ZohoCorp ManageEngine OpManager=12.3-build123189
ZohoCorp ManageEngine OpManager=12.3-build123190
ZohoCorp ManageEngine OpManager=12.3-build123191
ZohoCorp ManageEngine OpManager=12.3-build123192
ZohoCorp ManageEngine OpManager=12.3-build123193
ZohoCorp ManageEngine OpManager=12.3-build123194
ZohoCorp ManageEngine OpManager=12.3-build123195
ZohoCorp ManageEngine OpManager=12.3-build123196
ZohoCorp ManageEngine OpManager=12.3-build123197
ZohoCorp ManageEngine OpManager=12.3-build123198
ZohoCorp ManageEngine OpManager=12.3-build123204
ZohoCorp ManageEngine OpManager=12.3-build123205
ZohoCorp ManageEngine OpManager=12.3-build123206
ZohoCorp ManageEngine OpManager=12.3-build123207
ZohoCorp ManageEngine OpManager=12.3-build123208
ZohoCorp ManageEngine OpManager=12.3-build123214
ZohoCorp ManageEngine OpManager=12.3-build123215
ZohoCorp ManageEngine OpManager=12.3-build123217
ZohoCorp ManageEngine OpManager=12.3-build123218
ZohoCorp ManageEngine OpManager=12.3-build123219
ZohoCorp ManageEngine OpManager=12.3-build123220
ZohoCorp ManageEngine OpManager=12.3-build123221
ZohoCorp ManageEngine OpManager=123222
ZohoCorp ManageEngine OpManager=123223
ZohoCorp ManageEngine OpManager=123224
ZohoCorp ManageEngine OpManager=123229
ZohoCorp ManageEngine OpManager=123230
ZohoCorp ManageEngine OpManager=123231

Event History

Dec 6, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2018-19921?

CVE-2018-19921 is classified as a medium severity vulnerability due to its potential for XSS attacks.

2

How do I fix CVE-2018-19921?

To fix CVE-2018-19921, update your Zoho ManageEngine OpManager to version 12.3 build 123237 or higher.

3

What types of attacks can CVE-2018-19921 enable?

CVE-2018-19921 can enable attackers to execute arbitrary JavaScript in users' browsers through reflected XSS.

4

Is my version of OpManager vulnerable to CVE-2018-19921?

If you are running Zoho ManageEngine OpManager version 12.3 prior to build 123237, your version is vulnerable to CVE-2018-19921.

5

What is the impact of CVE-2018-19921 on my system?

The impact of CVE-2018-19921 includes unauthorized access to user sessions and potential data theft through executed scripts.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203