Read the docs

ManageEngine

Records132All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high70CVSS 7.0–8.9

Exploited now

ManageEngine records in CISA KEV

No ManageEngine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Servicedesk Plus 10 records HIGH Applications Manager 8 records MEDIUM Firewall Analyzer 4 records LOW Password Manager Pro 4 records MEDIUM Desktop Central 3 records HIGH Eventlog Analyzer 3 records LOW It360 3 records HIGH Oputils 3 records LOW

Records

4 records in Firewall Analyzer · all components

TI-2012-04131 CVE-2012-4889 · GHSA-jx3c-6xm2-5287

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2…

Priority LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to createAnomaly.do; (3) url…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07718 Published 2012-09-10 No fix listed CWE-79
TI-2012-04133 CVE-2012-4891 · GHSA-q45h-39rg-jm9r

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector than CVE-2012-4889.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03937 Published 2012-09-10 No fix listed CWE-79
Open these records in search →