CVE-2019-12595: XSS
Published Jul 11, 2019
·Updated
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter.
Affected Software
6 affected components
ZohoCorp Manageengine Assetexplorer=6.5
ZohoCorp Manageengine Assetexplorer=6.5-6500
ZohoCorp Manageengine Assetexplorer=6.5-6501
ZohoCorp Manageengine Assetexplorer=6.5-6502
ZohoCorp Manageengine Assetexplorer=6.5-6503
ZohoCorp Manageengine Assetexplorer=6.5-6504
Event History
Jul 11, 2019
CVE Published
via MITRE·01:14 PM
Data Sourced
via MITRE·01:14 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-12595.
2
What is the severity of CVE-2019-12595?
The severity of CVE-2019-12595 is medium with a CVSS score of 6.1.
3
How does the vulnerability affect Zohocorp Manageengine Assetexplorer?
The vulnerability affects Zohocorp Manageengine Assetexplorer version 6.5-6500 to 6.5-6504.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-12595?
The CWE ID for CVE-2019-12595 is CWE-79.
5
Are there any references available for CVE-2019-12595?
Yes, you can find references for CVE-2019-12595 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/109364), [GitHub](https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine), [ManageEngine](https://www.manageengine.com/products/asset-explorer/sp-readme.html).