CVE-2019-7427

MEDIUM

Zoho ManageEngine Netflow Analyzer Pro <7.0.0.2 - XSS

Title source: llm
STIX 2.1

Description

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/linkdownalertConfig.jsp" file in the autorefTime or graphTypes parameter.

References (2)

Core 2
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2019/Feb/29

Scores

CVSS v3 6.1
EPSS 0.0156
EPSS Percentile 81.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
zohocorp/manageengine_netflow_analyzer 7.0.0.2
Published May 07, 2019
Tracked Since Feb 18, 2026