VYPR

Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine

by Tarantula Team

CVEs (1)

  • CVE-2019-12539MedJul 11, 2019
    risk 0.40cvss 6.1epss 0.03

    An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is XSS via the SearchN.do search field, a different vulnerability than CVE-2019-12189.