CVE-2014-5103
Zohocorp Manageengine Eventlog Analyzer - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username parameter to event/j_security_check. Fixed in Version 10 Build 10000.
Scores
EPSS
0.0045
EPSS Percentile
63.3%
Details
CWE
CWE-79
Status
published
Products (2)
zohocorp/manageengine_eventlog_analyzer
n/a/n/a
Published
Jul 25, 2014
Tracked Since
Feb 18, 2026