CVE-2017-11560
N/A
N/A
Summary
An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locations of the application. JavaScript inside the uploaded HTML is also interpreted by the application. Thus, an attacker can inject a malicious JavaScript payload inside the HTML file and upload it to the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://manageengine.com
- http://opmanager.com
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736
References
- http://manageengine.com
- http://opmanager.com
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18736
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.