CVE-2019-16962: XSS
Published Jan 6, 2021
·Updated
Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report.
Affected Software
1 affected component
ZohoCorp Manageengine Desktop Central=10.0.430
Event History
Jan 6, 2021
CVE Published
via MITRE·04:55 PM
Data Sourced
via MITRE·04:55 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-16962?
The severity of CVE-2019-16962 is medium with a CVSS score of 5.4.
2
How does CVE-2019-16962 affect Zoho ManageEngine Desktop Central?
CVE-2019-16962 allows HTML injection via a modified Report Name in a New Custom Report in Zoho ManageEngine Desktop Central 10.0.430.
3
How can I fix CVE-2019-16962 in Zoho ManageEngine Desktop Central?
To fix CVE-2019-16962, you should update Zoho ManageEngine Desktop Central to version 10.0.431 or higher.
4
What is the CWE ID related to CVE-2019-16962?
The CWE ID related to CVE-2019-16962 is CWE-79 (Cross-site Scripting).