CVE-2019-12537: XSS
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-12537?
CVE-2019-12537 is a vulnerability discovered in Zoho ManageEngine AssetExplorer that allows for cross-site scripting (XSS) attacks through the SearchN.do search field.
How severe is CVE-2019-12537?
CVE-2019-12537 has a severity rating of 6.1, which is considered medium.
Which software versions are affected by CVE-2019-12537?
CVE-2019-12537 affects Zoho ManageEngine AssetExplorer versions 6.5, 6.5-6500, 6.5-6501, 6.5-6502, 6.5-6503, and 6.5-6504.
How can I fix CVE-2019-12537?
To fix CVE-2019-12537, it is recommended to update to the latest version of Zoho ManageEngine AssetExplorer where the vulnerability has been patched.
Where can I find more information about CVE-2019-12537?
More information about CVE-2019-12537 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/109364), [GitHub](https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine), [ManageEngine](https://www.manageengine.com/products/asset-explorer/readme.html).