CVE-2012-1062 in Applications Manager信息

摘要

由 VulDB • 2026-07-02

ManageEngine Applications Manager 9.x和10.x中存在多个跨站脚本（XSS）漏洞，远程攻击者可以通过以下途径注入任意Web脚本或HTML：(1) showHistoryData.do的period参数；(2) showresource.do的selectedNetwork、network或group参数；(3) AlarmView.do的header参数；以及(4) jsp/PopUp_Graph.jsp的attName参数。注意：Search.do/query向量已由CVE-2008-1566覆盖，jsp/ThresholdActionConfiguration.jsp redirectto向量已由CVE-2008-0474覆盖。

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2012-02-13

披露

2012-02-13

管理

已接受

条目

VDB-60172

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.01361

KEV

否

活动

非常低

部门

Transportation, Energy, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2012-1062
NVD	https://nvd.nist.gov/vuln/detail/CVE-2012-1062
CVE Details	https://www.cvedetails.com/cve/CVE-2012-1062/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!