CVE-2020-19554: XSS
Published Sep 21, 2021
·Updated
Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
Affected Software
1 affected component
ManageEngine OpManager<=12.5.174
Event History
Sep 21, 2021
CVE Published
via MITRE·07:07 PM
Data Sourced
via MITRE·07:07 PM
Description
Frequently Asked Questions
1
What is CVE-2020-19554?
CVE-2020-19554 is a Cross Site Scripting (XSS) vulnerability in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload.
2
How severe is CVE-2020-19554?
CVE-2020-19554 has a severity level of 6.1, which is classified as medium.
3
What software is affected by CVE-2020-19554?
ManageEngine OpManager versions up to 12.5.174 are affected by CVE-2020-19554.
4
How can I fix CVE-2020-19554?
To fix CVE-2020-19554, it is recommended to update ManageEngine OpManager to a version above 12.5.174.
5
Where can I find more information about CVE-2020-19554?
More information about CVE-2020-19554 can be found at this link: [CVE-2020-19554](https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125177)