Vulnerabilities

TI-2010-04564 CVE-2010-4841 · GHSA-h9xp-qvg3-4mwv

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID, (2) OS, (3) GROUP, (4) exportFile, (5) load, (6…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01834 Published 2011-09-27 No fix listed CWE-79

TI-2010-04563 CVE-2010-4840 · GHSA-qc73-vcr6-7q67

Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1…

LOW 37

Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02151 Published 2011-09-27 No fix listed CWE-119

TI-2008-01472 CVE-2008-1538 · GHSA-3xwr-fvj3-vh37

Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog…

LOW 22

Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2008-03-28 No fix listed CWE-79

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1…

Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1…

Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog…