6.4Orta
CVE-2025-27930Stored XSS
Açıklama
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ManageEngine | Applications Manager | ≤ 176600 | |
| zohocorp | manageengine applications manager | < 17.6 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (7)
cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*< 17.6cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:-:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176100:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176200:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176300:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176500:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_applications_manager:17.6:build176600:*:*:*:*:*:*