CVE-2018-9163

A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with…

published April 2, 2018

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04803 · 91.9th percentile
Published
2018-04-02T12:00Z
EPSS history
Timeline
  • 02 APR 12:00Z
    A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with…
    cvelistv5