← All advisories

Medium severity6.1NVD Advisory· Published Aug 29, 2021· Updated Jun 17, 2026

CVE-2021-40178

CVE-2021-40178

Description

Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Zohocorp/Manageengine Log36012 versions
cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:zohocorp:manageengine_log360:*:*:*:*:*:*:*:*range: <=5.1
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5200:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5201:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5206:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5209:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5210:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5211:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5213:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5214:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5218:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5219:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5220_beta:*:*:*:*:*:*
Zoho ManageEngine/Log360description
Zoho/ManageEngine PAM360llm-fuzzy
Range: <5224

Patches

Vulnerability mechanics

References

1

www.manageengine.com/log-management/readme.htmlnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.