CVE-2010-3274

Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build…

published February 17, 2011

CVSS

—

EPSS

21%

Percentile

97.6

In the wild

Unconfirmed

What it is

Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.21004 · 97.6th percentile
Published: 2011-02-17T17:00Z

EPSS history

Timeline

17 FEB 17:00Z
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build…
cvelistv5