CVE-2018-16833

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI

published September 21, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
65%
Percentile
99.3
In the wild
Unconfirmed
What it is

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.65406 · 99.3th percentile
Published
2018-09-21T17:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 65% → 52%
    epss
  • 06 SEP 03:11Z
    EPSS moved 65% → 52%
    epss
  • 30 AUG 16:00Z
    EPSS moved 52% → 65%
    epss
  • 29 AUG 04:34Z
    EPSS moved 65% → 52%
    epss
  • 21 SEP 17:00Z
    Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI
    cvelistv5