Unrated severityNVD Advisory· Published Aug 11, 2023· Updated Oct 9, 2024

CVE-2020-27449

Description

Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoho/ManageEngine Password Manager Prodescription
Zohocorp/Manageengine Password Manager Prollm-fuzzy
Range: 11001

Patches

Vulnerability mechanics

References

bugbounty.zoho.com/bb/mitre
www.manageengine.com/products/passwordmanagerpro/release-notes.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000