6.4Media
CVE-2025-27930Stored XSS
Descripción
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ManageEngine | Applications Manager | ≤ 176600 | |
| zohocorp | manageengine applications manager | < 17.6 |
Referencias y parches
Coincidencias CPE (NVD) (7)
cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*< 17.6cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:-:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176100:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176200:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176300:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176500:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176600:*:*:*:*:*:*