CVE-2019-12596: XSS
First published: Thu Jul 11 2019(Updated: )
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp Manageengine Assetexplorer | =6.5 | |
| Zohocorp Manageengine Assetexplorer | =6.5-6500 | |
| Zohocorp Manageengine Assetexplorer | =6.5-6501 | |
| Zohocorp Manageengine Assetexplorer | =6.5-6502 | |
| Zohocorp Manageengine Assetexplorer | =6.5-6503 | |
| Zohocorp Manageengine Assetexplorer | =6.5-6504 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-12596?
The severity of CVE-2019-12596 is medium (6.1).
How does CVE-2019-12596 affect Zoho ManageEngine AssetExplorer?
CVE-2019-12596 affects Zoho ManageEngine AssetExplorer through XSS via the SoftwareListView.do endpoint with the parameters swType or swComplianceType.
Which versions of Zoho ManageEngine AssetExplorer are affected by CVE-2019-12596?
Versions 6.5, 6.5-6500, 6.5-6501, 6.5-6502, 6.5-6503, and 6.5-6504 of Zoho ManageEngine AssetExplorer are affected by CVE-2019-12596.
What is the Common Weakness Enumeration (CWE) ID of CVE-2019-12596?
The Common Weakness Enumeration (CWE) ID of CVE-2019-12596 is 79.
How can I fix the XSS vulnerability in Zoho ManageEngine AssetExplorer?
Currently, there is no official patch or update available to fix the XSS vulnerability in Zoho ManageEngine AssetExplorer. It is recommended to apply security best practices and implement additional security measures to mitigate the risk.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/zohocorp
- canonical/zohocorp manageengine assetexplorer
- version/zohocorp manageengine assetexplorer/6.5
- version/zohocorp manageengine assetexplorer/6.5-6500
- version/zohocorp manageengine assetexplorer/6.5-6501
- version/zohocorp manageengine assetexplorer/6.5-6502
- version/zohocorp manageengine assetexplorer/6.5-6503
- version/zohocorp manageengine assetexplorer/6.5-6504