CVE-2019-16268

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration…

published February 3, 2021

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01810 · 78.5th percentile
Published
2021-02-03T17:55Z
EPSS history
Timeline
  • 03 FEB 17:55Z
    Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration…
    cvelistv5