medium
6.1
CWE
79
Advisory Published
Updated

CVE-2018-20339: XSS

First published: Fri Dec 21 2018(Updated: )

Zoho ManageEngine OpManager 12.3 before build 123239 allows XSS in the Notes column of the Alarms section.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
ManageEngine OpManager MSP=12.3-build12300
ManageEngine OpManager MSP=12.3-build123001
ManageEngine OpManager MSP=12.3-build123002
ManageEngine OpManager MSP=12.3-build123003
ManageEngine OpManager MSP=12.3-build123004
ManageEngine OpManager MSP=12.3-build123005
ManageEngine OpManager MSP=12.3-build123006
ManageEngine OpManager MSP=12.3-build123007
ManageEngine OpManager MSP=12.3-build123008
ManageEngine OpManager MSP=12.3-build123009
ManageEngine OpManager MSP=12.3-build123010
ManageEngine OpManager MSP=12.3-build123011
ManageEngine OpManager MSP=12.3-build123012
ManageEngine OpManager MSP=12.3-build123013
ManageEngine OpManager MSP=12.3-build123014
ManageEngine OpManager MSP=12.3-build123015
ManageEngine OpManager MSP=12.3-build123021
ManageEngine OpManager MSP=12.3-build123022
ManageEngine OpManager MSP=12.3-build123023
ManageEngine OpManager MSP=12.3-build123024
ManageEngine OpManager MSP=12.3-build123025
ManageEngine OpManager MSP=12.3-build123026
ManageEngine OpManager MSP=12.3-build123027
ManageEngine OpManager MSP=12.3-build123028
ManageEngine OpManager MSP=12.3-build123029
ManageEngine OpManager MSP=12.3-build123030
ManageEngine OpManager MSP=12.3-build123031
ManageEngine OpManager MSP=12.3-build123032
ManageEngine OpManager MSP=12.3-build123033
ManageEngine OpManager MSP=12.3-build123034
ManageEngine OpManager MSP=12.3-build123035
ManageEngine OpManager MSP=12.3-build123036
ManageEngine OpManager MSP=12.3-build123037
ManageEngine OpManager MSP=12.3-build123043
ManageEngine OpManager MSP=12.3-build123044
ManageEngine OpManager MSP=12.3-build123045
ManageEngine OpManager MSP=12.3-build123046
ManageEngine OpManager MSP=12.3-build123047
ManageEngine OpManager MSP=12.3-build123048
ManageEngine OpManager MSP=12.3-build123049
ManageEngine OpManager MSP=12.3-build123050
ManageEngine OpManager MSP=12.3-build123051
ManageEngine OpManager MSP=12.3-build123052
ManageEngine OpManager MSP=12.3-build123053
ManageEngine OpManager MSP=12.3-build123054
ManageEngine OpManager MSP=12.3-build123055
ManageEngine OpManager MSP=12.3-build123056
ManageEngine OpManager MSP=12.3-build123057
ManageEngine OpManager MSP=12.3-build123062
ManageEngine OpManager MSP=12.3-build123063
ManageEngine OpManager MSP=12.3-build123064
ManageEngine OpManager MSP=12.3-build123065
ManageEngine OpManager MSP=12.3-build123066
ManageEngine OpManager MSP=12.3-build123067
ManageEngine OpManager MSP=12.3-build123068
ManageEngine OpManager MSP=12.3-build123069
ManageEngine OpManager MSP=12.3-build123070
ManageEngine OpManager MSP=12.3-build123076
ManageEngine OpManager MSP=12.3-build123077
ManageEngine OpManager MSP=12.3-build123078
ManageEngine OpManager MSP=12.3-build123079
ManageEngine OpManager MSP=12.3-build123080
ManageEngine OpManager MSP=12.3-build123081
ManageEngine OpManager MSP=12.3-build123082
ManageEngine OpManager MSP=12.3-build123083
ManageEngine OpManager MSP=12.3-build123084
ManageEngine OpManager MSP=12.3-build123086
ManageEngine OpManager MSP=12.3-build123090
ManageEngine OpManager MSP=12.3-build123091
ManageEngine OpManager MSP=12.3-build123092
ManageEngine OpManager MSP=12.3-build123093
ManageEngine OpManager MSP=12.3-build123104
ManageEngine OpManager MSP=12.3-build123105
ManageEngine OpManager MSP=12.3-build123106
ManageEngine OpManager MSP=12.3-build123107
ManageEngine OpManager MSP=12.3-build123108
ManageEngine OpManager MSP=12.3-build123109
ManageEngine OpManager MSP=12.3-build123110
ManageEngine OpManager MSP=12.3-build123111
ManageEngine OpManager MSP=12.3-build123112
ManageEngine OpManager MSP=12.3-build123113
ManageEngine OpManager MSP=12.3-build123114
ManageEngine OpManager MSP=12.3-build123115
ManageEngine OpManager MSP=12.3-build123116
ManageEngine OpManager MSP=12.3-build123117
ManageEngine OpManager MSP=12.3-build123118
ManageEngine OpManager MSP=12.3-build123119
ManageEngine OpManager MSP=12.3-build123120
ManageEngine OpManager MSP=12.3-build123121
ManageEngine OpManager MSP=12.3-build123122
ManageEngine OpManager MSP=12.3-build123123
ManageEngine OpManager MSP=12.3-build123124
ManageEngine OpManager MSP=12.3-build123125
ManageEngine OpManager MSP=12.3-build123126
ManageEngine OpManager MSP=12.3-build123127
ManageEngine OpManager MSP=12.3-build123136
ManageEngine OpManager MSP=12.3-build123137
ManageEngine OpManager MSP=12.3-build123147
ManageEngine OpManager MSP=12.3-build123148
ManageEngine OpManager MSP=12.3-build123149
ManageEngine OpManager MSP=12.3-build123150
ManageEngine OpManager MSP=12.3-build123156
ManageEngine OpManager MSP=12.3-build123157
ManageEngine OpManager MSP=12.3-build123158
ManageEngine OpManager MSP=12.3-build123159
ManageEngine OpManager MSP=12.3-build123160
ManageEngine OpManager MSP=12.3-build123161
ManageEngine OpManager MSP=12.3-build123162
ManageEngine OpManager MSP=12.3-build123163
ManageEngine OpManager MSP=12.3-build123164
ManageEngine OpManager MSP=12.3-build123165
ManageEngine OpManager MSP=12.3-build123166
ManageEngine OpManager MSP=12.3-build123167
ManageEngine OpManager MSP=12.3-build123168
ManageEngine OpManager MSP=12.3-build123169
ManageEngine OpManager MSP=12.3-build123175
ManageEngine OpManager MSP=12.3-build123176
ManageEngine OpManager MSP=12.3-build123177
ManageEngine OpManager MSP=12.3-build123178
ManageEngine OpManager MSP=12.3-build123179
ManageEngine OpManager MSP=12.3-build123180
ManageEngine OpManager MSP=12.3-build123181
ManageEngine OpManager MSP=12.3-build123182
ManageEngine OpManager MSP=12.3-build123183
ManageEngine OpManager MSP=12.3-build123184
ManageEngine OpManager MSP=12.3-build123185
ManageEngine OpManager MSP=12.3-build123186
ManageEngine OpManager MSP=12.3-build123187
ManageEngine OpManager MSP=12.3-build123188
ManageEngine OpManager MSP=12.3-build123189
ManageEngine OpManager MSP=12.3-build123190
ManageEngine OpManager MSP=12.3-build123191
ManageEngine OpManager MSP=12.3-build123192
ManageEngine OpManager MSP=12.3-build123193
ManageEngine OpManager MSP=12.3-build123194
ManageEngine OpManager MSP=12.3-build123195
ManageEngine OpManager MSP=12.3-build123196
ManageEngine OpManager MSP=12.3-build123197
ManageEngine OpManager MSP=12.3-build123198
ManageEngine OpManager MSP=12.3-build123204
ManageEngine OpManager MSP=12.3-build123205
ManageEngine OpManager MSP=12.3-build123206
ManageEngine OpManager MSP=12.3-build123207
ManageEngine OpManager MSP=12.3-build123208
ManageEngine OpManager MSP=12.3-build123222
ManageEngine OpManager MSP=12.3-build123223
ManageEngine OpManager MSP=12.3-build123224
ManageEngine OpManager MSP=12.3-build123229
ManageEngine OpManager MSP=12.3-build123230
ManageEngine OpManager MSP=12.3-build123231
ManageEngine OpManager MSP=12.3-build123237
ManageEngine OpManager MSP=12.3-build123238

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2018-20339?

    CVE-2018-20339 has been classified as a medium severity vulnerability due to the potential for cross-site scripting (XSS) attacks.

  • How do I fix CVE-2018-20339?

    To fix CVE-2018-20339, upgrade Zoho ManageEngine OpManager to version 12.3 build 123239 or later.

  • What type of vulnerability is CVE-2018-20339?

    CVE-2018-20339 is a cross-site scripting (XSS) vulnerability affecting the Notes column of the Alarms section.

  • Which versions of ManageEngine OpManager are affected by CVE-2018-20339?

    CVE-2018-20339 affects all ManageEngine OpManager versions prior to 12.3 build 123239.

  • What could an attacker do with CVE-2018-20339?

    An attacker could exploit CVE-2018-20339 to inject malicious scripts into the Notes section, affecting users who view those notes.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203