CVE-2019-8929: XSS
An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. XSS exists in the Administration zone /netflow/jspui/selectDevice.jsp file in these GET parameters: param and rtype.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8929?
The severity of CVE-2019-8929 is medium with a CVSS score of 6.1.
How does XSS vulnerability occur in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2?
XSS vulnerability occurs in the Administration zone /netflow/jspui/selectDevice.jsp file through the GET parameters 'param' and 'rtype'.
How can I fix the XSS vulnerability in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2?
To fix the XSS vulnerability, it is recommended to update Zoho ManageEngine Netflow Analyzer Professional to a version higher than 7.0.0.2.
Are there any known exploits for CVE-2019-8929?
Yes, there are known exploits for CVE-2019-8929. More information can be found at the provided references.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2019-8929?
The Common Weakness Enumeration (CWE) ID associated with CVE-2019-8929 is CWE-79 (Cross-Site Scripting).