CVE-2019-7422

MEDIUM

Zoho ManageEngine Netflow Analyzer Professional <7.0.0.2 - XSS

Title source: llm
STIX 2.1

Description

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/addMailSettings.jsp" file in the gF parameter.

References (3)

Core 3
Core References
Product, Vendor Advisory x_refsource_misc
https://www.manageengine.com/products/netflow/?doc
Exploit, Mailing List, Patch, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Feb/29

Scores

CVSS v3 6.1
EPSS 0.0110
EPSS Percentile 78.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
zohocorp/manageengine_netflow_analyzer 7.0.0.2
Published Mar 21, 2019
Tracked Since Feb 18, 2026