Zoho Manageengine Assetexplorer 漏洞

时间轴

版本

6.1 SP 61124
6.2.04

修正

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined12

易受攻击性

High0
Functional0
Proof-of-Concept4
Unproven0
Not Defined10

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network14

身份验证

Not Defined0
High0
Low4
None10

用户交互

Not Defined0
Required12
None2

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤54
≤66
≤70
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤66
≤70
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤510
≤60
≤72
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤76
≤80
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤92
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k6
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k14
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (11): 5.0, 5.1, 5.2, 5.3, 5.4, 5.5, 6.0, 6.1, 6.1 SP 6112, 6.2, 6.5

Link to Product Website: https://www.manageengine.com/

已发布BaseTemp漏洞0day今天易修正CTICVE
2021-04-104.34.1Zoho ManageEngine ServiceDesk Plus/AssetExplorer XML Asset File 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-20080
2020-03-236.66.6Zoho ManageEngine AssetExplorer Upgrade Privilege Escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-8838
2019-08-087.67.6Zoho ManageEngine AssetExplorer License XML External Entity$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-14693
2019-08-087.87.8Zoho ManageEngine AssetExplorer AJaxServlet 权限升级$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-12994
2019-08-087.57.5Zoho ManageEngine AssetExplorer ClientUtilServlet 权限升级$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-12959
2019-07-115.25.2Zoho ManageEngine AssetExplorer ResourcesAttachments.jsp 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2019-12597
2019-07-115.25.2Zoho ManageEngine AssetExplorer SoftwareListView.do 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2019-12596
2019-07-115.25.2Zoho ManageEngine AssetExplorer RCSettings.do 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2019-12595
2019-07-115.25.2Zoho ManageEngine AssetExplorer SearchN.do 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2019-12537
2018-10-025.25.2Zoho ManageEngine AssetExplorer AssetDef.do Stored 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-17596

3 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 3 results.

更多条目由 Zoho Manageengine

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!