CVE-2019-11511: XSS
Published Apr 25, 2019
·Updated
Zoho ManageEngine ADSelfService Plus before build 5708 has XSS via the mobile app API.
Affected Software
99 affected components
ZohoCorp ManageEngine ADSelfService Plus=5.7-4500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5032
ZohoCorp ManageEngine ADSelfService Plus=5.7-5040
ZohoCorp ManageEngine ADSelfService Plus=5.7-5041
ZohoCorp ManageEngine ADSelfService Plus=5.7-5100
ZohoCorp ManageEngine ADSelfService Plus=5.7-5101
ZohoCorp ManageEngine ADSelfService Plus=5.7-5102
ZohoCorp ManageEngine ADSelfService Plus=5.7-5103
ZohoCorp ManageEngine ADSelfService Plus=5.7-5104
ZohoCorp ManageEngine ADSelfService Plus=5.7-5105
ZohoCorp ManageEngine ADSelfService Plus=5.7-5106
ZohoCorp ManageEngine ADSelfService Plus=5.7-5107
ZohoCorp ManageEngine ADSelfService Plus=5.7-5108
ZohoCorp ManageEngine ADSelfService Plus=5.7-5109
ZohoCorp ManageEngine ADSelfService Plus=5.7-5110
ZohoCorp ManageEngine ADSelfService Plus=5.7-5111
ZohoCorp ManageEngine ADSelfService Plus=5.7-5112
ZohoCorp ManageEngine ADSelfService Plus=5.7-5113
ZohoCorp ManageEngine ADSelfService Plus=5.7-5114
ZohoCorp ManageEngine ADSelfService Plus=5.7-5115
ZohoCorp ManageEngine ADSelfService Plus=5.7-5116
ZohoCorp ManageEngine ADSelfService Plus=5.7-5200
ZohoCorp ManageEngine ADSelfService Plus=5.7-5201
ZohoCorp ManageEngine ADSelfService Plus=5.7-5202
ZohoCorp ManageEngine ADSelfService Plus=5.7-5203
ZohoCorp ManageEngine ADSelfService Plus=5.7-5204
ZohoCorp ManageEngine ADSelfService Plus=5.7-5205
ZohoCorp ManageEngine ADSelfService Plus=5.7-5206
ZohoCorp ManageEngine ADSelfService Plus=5.7-5207
ZohoCorp ManageEngine ADSelfService Plus=5.7-5300
ZohoCorp ManageEngine ADSelfService Plus=5.7-5301
ZohoCorp ManageEngine ADSelfService Plus=5.7-5302
ZohoCorp ManageEngine ADSelfService Plus=5.7-5303
ZohoCorp ManageEngine ADSelfService Plus=5.7-5304
ZohoCorp ManageEngine ADSelfService Plus=5.7-5305
ZohoCorp ManageEngine ADSelfService Plus=5.7-5306
ZohoCorp ManageEngine ADSelfService Plus=5.7-5307
ZohoCorp ManageEngine ADSelfService Plus=5.7-5308
ZohoCorp ManageEngine ADSelfService Plus=5.7-5309
ZohoCorp ManageEngine ADSelfService Plus=5.7-5310
ZohoCorp ManageEngine ADSelfService Plus=5.7-5311
ZohoCorp ManageEngine ADSelfService Plus=5.7-5312
ZohoCorp ManageEngine ADSelfService Plus=5.7-5313
ZohoCorp ManageEngine ADSelfService Plus=5.7-5314
ZohoCorp ManageEngine ADSelfService Plus=5.7-5315
ZohoCorp ManageEngine ADSelfService Plus=5.7-5316
ZohoCorp ManageEngine ADSelfService Plus=5.7-5317
ZohoCorp ManageEngine ADSelfService Plus=5.7-5318
ZohoCorp ManageEngine ADSelfService Plus=5.7-5319
ZohoCorp ManageEngine ADSelfService Plus=5.7-5320
ZohoCorp ManageEngine ADSelfService Plus=5.7-5321
ZohoCorp ManageEngine ADSelfService Plus=5.7-5322
ZohoCorp ManageEngine ADSelfService Plus=5.7-5323
ZohoCorp ManageEngine ADSelfService Plus=5.7-5324
ZohoCorp ManageEngine ADSelfService Plus=5.7-5325
ZohoCorp ManageEngine ADSelfService Plus=5.7-5326
ZohoCorp ManageEngine ADSelfService Plus=5.7-5327
ZohoCorp ManageEngine ADSelfService Plus=5.7-5328
ZohoCorp ManageEngine ADSelfService Plus=5.7-5329
ZohoCorp ManageEngine ADSelfService Plus=5.7-5330
ZohoCorp ManageEngine ADSelfService Plus=5.7-5400
ZohoCorp ManageEngine ADSelfService Plus=5.7-5500
ZohoCorp ManageEngine ADSelfService Plus=5.7-5501
ZohoCorp ManageEngine ADSelfService Plus=5.7-5502
ZohoCorp ManageEngine ADSelfService Plus=5.7-5503
ZohoCorp ManageEngine ADSelfService Plus=5.7-5504
ZohoCorp ManageEngine ADSelfService Plus=5.7-5505
ZohoCorp ManageEngine ADSelfService Plus=5.7-5506
ZohoCorp ManageEngine ADSelfService Plus=5.7-5507
ZohoCorp ManageEngine ADSelfService Plus=5.7-5508
ZohoCorp ManageEngine ADSelfService Plus=5.7-5509
ZohoCorp ManageEngine ADSelfService Plus=5.7-5510
ZohoCorp ManageEngine ADSelfService Plus=5.7-5511
ZohoCorp ManageEngine ADSelfService Plus=5.7-5512
ZohoCorp ManageEngine ADSelfService Plus=5.7-5513
ZohoCorp ManageEngine ADSelfService Plus=5.7-5514
ZohoCorp ManageEngine ADSelfService Plus=5.7-5515
ZohoCorp ManageEngine ADSelfService Plus=5.7-5516
ZohoCorp ManageEngine ADSelfService Plus=5.7-5517
ZohoCorp ManageEngine ADSelfService Plus=5.7-5518
ZohoCorp ManageEngine ADSelfService Plus=5.7-5519
ZohoCorp ManageEngine ADSelfService Plus=5.7-5520
ZohoCorp ManageEngine ADSelfService Plus=5.7-5521
ZohoCorp ManageEngine ADSelfService Plus=5.7-5600
ZohoCorp ManageEngine ADSelfService Plus=5.7-5601
ZohoCorp ManageEngine ADSelfService Plus=5.7-5602
ZohoCorp ManageEngine ADSelfService Plus=5.7-5603
ZohoCorp ManageEngine ADSelfService Plus=5.7-5604
ZohoCorp ManageEngine ADSelfService Plus=5.7-5605
ZohoCorp ManageEngine ADSelfService Plus=5.7-5606
ZohoCorp ManageEngine ADSelfService Plus=5.7-5607
ZohoCorp ManageEngine ADSelfService Plus=5.7-5700
ZohoCorp ManageEngine ADSelfService Plus=5.7-5701
ZohoCorp ManageEngine ADSelfService Plus=5.7-5702
ZohoCorp ManageEngine ADSelfService Plus=5.7-5703
ZohoCorp ManageEngine ADSelfService Plus=5.7-5704
ZohoCorp ManageEngine ADSelfService Plus=5.7-5705
ZohoCorp ManageEngine ADSelfService Plus=5.7-5706
ZohoCorp ManageEngine ADSelfService Plus=5.7-5707
Event History
Apr 25, 2019
CVE Published
via MITRE·02:38 AM
Data Sourced
via MITRE·02:38 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11511?
CVE-2019-11511 is classified as a critical vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
2
How do I fix CVE-2019-11511?
To fix CVE-2019-11511, upgrade to Zoho ManageEngine ADSelfService Plus build 5708 or later.
3
What versions of Zoho ManageEngine ADSelfService Plus are affected by CVE-2019-11511?
CVE-2019-11511 affects versions of Zoho ManageEngine ADSelfService Plus prior to build 5708.
4
What type of attack does CVE-2019-11511 facilitate?
CVE-2019-11511 facilitates cross-site scripting (XSS) attacks via the mobile app API.
5
Is there a workaround for CVE-2019-11511 before applying a patch?
There is no official workaround for CVE-2019-11511, so it is recommended to update to the patched version as soon as possible.