CVE-2019-12543: XSS
Published Jun 5, 2019
·Updated
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter.
Affected Software
1 affected component
ZohoCorp ManageEngine ServiceDesk Plus=9.3
Event History
Jun 5, 2019
CVE Published
via MITRE·02:15 PM
Data Sourced
via MITRE·02:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-12543?
The severity of CVE-2019-12543 is medium.
2
What is CVE-2019-12543?
CVE-2019-12543 is a vulnerability in Zoho ManageEngine ServiceDesk Plus 9.3 that allows for XSS via the PurchaseRequest.do serviceRequestId parameter.
3
How does CVE-2019-12543 affect Zoho ManageEngine ServiceDesk Plus?
CVE-2019-12543 affects Zoho ManageEngine ServiceDesk Plus 9.3 by allowing for XSS attacks via the PurchaseRequest.do serviceRequestId parameter.
4
How can I fix CVE-2019-12543?
To fix CVE-2019-12543, it is recommended to update Zoho ManageEngine ServiceDesk Plus to the latest version.
5
What is CWE-79?
CWE-79 is a Common Weakness Enumeration category for XSS (Cross-Site Scripting) vulnerabilities.