CVE-2018-20484: XSS
Published Dec 26, 2018
·Updated
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
Affected Software
92 affected components
ZohoCorp ManageEngine ADSelfService Plus=5.7-4500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5032
ZohoCorp ManageEngine ADSelfService Plus=5.7-5040
ZohoCorp ManageEngine ADSelfService Plus=5.7-5041
ZohoCorp ManageEngine ADSelfService Plus=5.7-5100
ZohoCorp ManageEngine ADSelfService Plus=5.7-5101
ZohoCorp ManageEngine ADSelfService Plus=5.7-5102
ZohoCorp ManageEngine ADSelfService Plus=5.7-5103
ZohoCorp ManageEngine ADSelfService Plus=5.7-5104
ZohoCorp ManageEngine ADSelfService Plus=5.7-5105
ZohoCorp ManageEngine ADSelfService Plus=5.7-5106
ZohoCorp ManageEngine ADSelfService Plus=5.7-5107
ZohoCorp ManageEngine ADSelfService Plus=5.7-5108
ZohoCorp ManageEngine ADSelfService Plus=5.7-5109
ZohoCorp ManageEngine ADSelfService Plus=5.7-5110
ZohoCorp ManageEngine ADSelfService Plus=5.7-5111
ZohoCorp ManageEngine ADSelfService Plus=5.7-5112
ZohoCorp ManageEngine ADSelfService Plus=5.7-5113
ZohoCorp ManageEngine ADSelfService Plus=5.7-5114
ZohoCorp ManageEngine ADSelfService Plus=5.7-5115
ZohoCorp ManageEngine ADSelfService Plus=5.7-5116
ZohoCorp ManageEngine ADSelfService Plus=5.7-5200
ZohoCorp ManageEngine ADSelfService Plus=5.7-5201
ZohoCorp ManageEngine ADSelfService Plus=5.7-5202
ZohoCorp ManageEngine ADSelfService Plus=5.7-5203
ZohoCorp ManageEngine ADSelfService Plus=5.7-5204
ZohoCorp ManageEngine ADSelfService Plus=5.7-5205
ZohoCorp ManageEngine ADSelfService Plus=5.7-5206
ZohoCorp ManageEngine ADSelfService Plus=5.7-5207
ZohoCorp ManageEngine ADSelfService Plus=5.7-5300
ZohoCorp ManageEngine ADSelfService Plus=5.7-5301
ZohoCorp ManageEngine ADSelfService Plus=5.7-5302
ZohoCorp ManageEngine ADSelfService Plus=5.7-5303
ZohoCorp ManageEngine ADSelfService Plus=5.7-5304
ZohoCorp ManageEngine ADSelfService Plus=5.7-5305
ZohoCorp ManageEngine ADSelfService Plus=5.7-5306
ZohoCorp ManageEngine ADSelfService Plus=5.7-5307
ZohoCorp ManageEngine ADSelfService Plus=5.7-5308
ZohoCorp ManageEngine ADSelfService Plus=5.7-5309
ZohoCorp ManageEngine ADSelfService Plus=5.7-5310
ZohoCorp ManageEngine ADSelfService Plus=5.7-5311
ZohoCorp ManageEngine ADSelfService Plus=5.7-5312
ZohoCorp ManageEngine ADSelfService Plus=5.7-5313
ZohoCorp ManageEngine ADSelfService Plus=5.7-5314
ZohoCorp ManageEngine ADSelfService Plus=5.7-5315
ZohoCorp ManageEngine ADSelfService Plus=5.7-5316
ZohoCorp ManageEngine ADSelfService Plus=5.7-5317
ZohoCorp ManageEngine ADSelfService Plus=5.7-5318
ZohoCorp ManageEngine ADSelfService Plus=5.7-5319
ZohoCorp ManageEngine ADSelfService Plus=5.7-5320
ZohoCorp ManageEngine ADSelfService Plus=5.7-5321
ZohoCorp ManageEngine ADSelfService Plus=5.7-5322
ZohoCorp ManageEngine ADSelfService Plus=5.7-5323
ZohoCorp ManageEngine ADSelfService Plus=5.7-5324
ZohoCorp ManageEngine ADSelfService Plus=5.7-5325
ZohoCorp ManageEngine ADSelfService Plus=5.7-5326
ZohoCorp ManageEngine ADSelfService Plus=5.7-5327
ZohoCorp ManageEngine ADSelfService Plus=5.7-5328
ZohoCorp ManageEngine ADSelfService Plus=5.7-5329
ZohoCorp ManageEngine ADSelfService Plus=5.7-5330
ZohoCorp ManageEngine ADSelfService Plus=5.7-5400
ZohoCorp ManageEngine ADSelfService Plus=5.7-5500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5501
ZohoCorp ManageEngine ADSelfService Plus=5.7-5502
ZohoCorp ManageEngine ADSelfService Plus=5.7-5503
ZohoCorp ManageEngine ADSelfService Plus=5.7-5504
ZohoCorp ManageEngine ADSelfService Plus=5.7-5505
ZohoCorp ManageEngine ADSelfService Plus=5.7-5506
ZohoCorp ManageEngine ADSelfService Plus=5.7-5507
ZohoCorp ManageEngine ADSelfService Plus=5.7-5508
ZohoCorp ManageEngine ADSelfService Plus=5.7-5509
ZohoCorp ManageEngine ADSelfService Plus=5.7-5510
ZohoCorp ManageEngine ADSelfService Plus=5.7-5511
ZohoCorp ManageEngine ADSelfService Plus=5.7-5512
ZohoCorp ManageEngine ADSelfService Plus=5.7-5513
ZohoCorp ManageEngine ADSelfService Plus=5.7-5514
ZohoCorp ManageEngine ADSelfService Plus=5.7-5515
ZohoCorp ManageEngine ADSelfService Plus=5.7-5516
ZohoCorp ManageEngine ADSelfService Plus=5.7-5517
ZohoCorp ManageEngine ADSelfService Plus=5.7-5518
ZohoCorp ManageEngine ADSelfService Plus=5.7-5519
ZohoCorp ManageEngine ADSelfService Plus=5.7-5520
ZohoCorp ManageEngine ADSelfService Plus=5.7-5521
ZohoCorp ManageEngine ADSelfService Plus=5.7-5600
ZohoCorp ManageEngine ADSelfService Plus=5.7-5601
ZohoCorp ManageEngine ADSelfService Plus=5.7-5602
ZohoCorp ManageEngine ADSelfService Plus=5.7-5603
ZohoCorp ManageEngine ADSelfService Plus=5.7-5604
ZohoCorp ManageEngine ADSelfService Plus=5.7-5605
ZohoCorp ManageEngine ADSelfService Plus=5.7-5606
ZohoCorp ManageEngine ADSelfService Plus=5.7-5700
ZohoCorp ManageEngine ADSelfService Plus=5.7-5701
Event History
Dec 26, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20484?
CVE-2018-20484 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2018-20484?
To fix CVE-2018-20484, upgrade Zoho ManageEngine ADSelfService Plus to version 5.7 build 5702 or later.
3
What impact does CVE-2018-20484 have on my system?
CVE-2018-20484 allows attackers to execute arbitrary JavaScript in the context of the user's browser, potentially compromising user data.
4
Is CVE-2018-20484 being actively exploited?
There have been reports indicating potential exploitation of CVE-2018-20484, making it crucial to patch affected systems immediately.
5
Which versions of ManageEngine ADSelfService Plus are affected by CVE-2018-20484?
CVE-2018-20484 affects ManageEngine ADSelfService Plus versions prior to 5.7 build 5702.