CVE-2019-12189: XSS
Published May 21, 2019
·Updated
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field.
Affected Software
1 affected component
ZohoCorp ManageEngine ServiceDesk Plus=9.3
Event History
May 21, 2019
CVE Published
via MITRE·05:30 PM
Data Sourced
via MITRE·05:30 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-12189.
2
What is the severity of CVE-2019-12189?
The severity of CVE-2019-12189 is medium.
3
What is the affected software for CVE-2019-12189?
The affected software for CVE-2019-12189 is Zoho ManageEngine ServiceDesk Plus version 9.3.
4
How does CVE-2019-12189 work?
CVE-2019-12189 allows attackers to perform cross-site scripting (XSS) attacks via the SearchN.do search field in Zoho ManageEngine ServiceDesk Plus 9.3.
5
Is there a fix for CVE-2019-12189?
Yes, it is recommended to upgrade to a newer version of Zoho ManageEngine ServiceDesk Plus that does not contain the vulnerability.