CVE-2018-20484 Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
MediumCVSS 6.1
EPSS 5.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-4500 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5032 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5040 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5041 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5100 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5101 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5102 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5103 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5104 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5105 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5106 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5107 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5108 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5109 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5110 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5111 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5112 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5113 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5114 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5115 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5116 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5200 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5201 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5202 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5203 | No fix listed |
Show 67 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5204 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5205 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5206 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5207 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5300 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5301 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5302 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5303 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5304 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5305 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5306 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5307 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5308 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5309 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5310 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5311 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5312 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5313 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5314 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5315 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5316 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5317 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5318 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5319 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5320 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5321 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5322 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5323 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5324 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5325 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5326 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5327 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5328 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5329 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5330 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5400 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5500 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5501 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5502 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5503 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5504 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5505 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5506 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5507 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5508 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5509 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5510 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5511 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5512 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5513 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5514 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5515 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5516 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5517 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5518 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5519 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5520 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5521 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5600 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5601 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5602 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5603 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5604 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5605 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5606 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5700 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5701 | No fix listed |
References
- packetstormsecurity.com
- www.manageengine.com release-notes vendor-advisory