CVE-2019-11676: XSS
Published May 2, 2019
·Updated
The user defined DNS name in Zoho ManageEngine Firewall Analyzer before 12.3 Build 123224 is vulnerable to stored XSS attacks.
Affected Software
36 affected components
ZohoCorp Manageengine Firewall Analyzer=7.2-7020
ZohoCorp Manageengine Firewall Analyzer=7.2-7021
ZohoCorp Manageengine Firewall Analyzer=7.4-7400
ZohoCorp Manageengine Firewall Analyzer=7.6-7600
ZohoCorp Manageengine Firewall Analyzer=8.0-8000
ZohoCorp Manageengine Firewall Analyzer=8.1-8110
ZohoCorp Manageengine Firewall Analyzer=8.3-8300
ZohoCorp Manageengine Firewall Analyzer=8.5-8500
ZohoCorp Manageengine Firewall Analyzer=12.0-12000
ZohoCorp Manageengine Firewall Analyzer=12.2-12200
ZohoCorp Manageengine Firewall Analyzer=12.3-12300
ZohoCorp Manageengine Firewall Analyzer=12.3-123008
ZohoCorp Manageengine Firewall Analyzer=12.3-123027
ZohoCorp Manageengine Firewall Analyzer=12.3-123045
ZohoCorp Manageengine Firewall Analyzer=12.3-123057
ZohoCorp Manageengine Firewall Analyzer=12.3-123064
ZohoCorp Manageengine Firewall Analyzer=12.3-123070
ZohoCorp Manageengine Firewall Analyzer=12.3-123083
ZohoCorp Manageengine Firewall Analyzer=12.3-123092
ZohoCorp Manageengine Firewall Analyzer=12.3-123126
ZohoCorp Manageengine Firewall Analyzer=12.3-123129
ZohoCorp Manageengine Firewall Analyzer=12.3-123137
ZohoCorp Manageengine Firewall Analyzer=12.3-123151
ZohoCorp Manageengine Firewall Analyzer=12.3-123156
ZohoCorp Manageengine Firewall Analyzer=12.3-123164
ZohoCorp Manageengine Firewall Analyzer=12.3-123169
ZohoCorp Manageengine Firewall Analyzer=12.3-123177
ZohoCorp Manageengine Firewall Analyzer=12.3-123182
ZohoCorp Manageengine Firewall Analyzer=12.3-123185
ZohoCorp Manageengine Firewall Analyzer=12.3-123186
ZohoCorp Manageengine Firewall Analyzer=12.3-123194
ZohoCorp Manageengine Firewall Analyzer=12.3-123197
ZohoCorp Manageengine Firewall Analyzer=12.3-123208
ZohoCorp Manageengine Firewall Analyzer=12.3-123218
ZohoCorp Manageengine Firewall Analyzer=12.3-123222
ZohoCorp Manageengine Firewall Analyzer=12.3-123223
Event History
May 2, 2019
CVE Published
via MITRE·01:05 PM
Data Sourced
via MITRE·01:05 PM
Description
Frequently Asked Questions
1
What is CVE-2019-11676?
CVE-2019-11676 is a vulnerability in Zoho ManageEngine Firewall Analyzer that allows for stored XSS attacks through user-defined DNS names.
2
What is the severity of CVE-2019-11676?
CVE-2019-11676 has a severity level of 6.1 (Medium).
3
Which versions of Zoho ManageEngine Firewall Analyzer are affected by CVE-2019-11676?
Versions 7.2-7020 to 12.3-123223 of Zoho ManageEngine Firewall Analyzer are affected by CVE-2019-11676.
4
How can I fix the CVE-2019-11676 vulnerability?
To fix the CVE-2019-11676 vulnerability, update Zoho ManageEngine Firewall Analyzer to version 12.3 Build 123224 or later.
5
Where can I find more information about CVE-2019-11676?
More information about CVE-2019-11676 can be found in the release notes of Zoho ManageEngine Firewall Analyzer at the following link: [link](https://www.manageengine.com/products/firewall/release-notes.html)