CVE-2017-11686

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing…

published July 27, 2017

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02293 · 83.0th percentile
Published
2017-07-27T06:00Z
EPSS history
Timeline
  • 27 JUL 06:00Z
    Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing…
    cvelistv5