CVE-2021-31813

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD

published July 1, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS

—

EPSS

78%

Percentile

99.6

In the wild

Unconfirmed

What it is

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.78268 · 99.6th percentile
Published: 2021-07-01T11:58Z

EPSS history

Timeline

01 JUL 11:58Z
Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD
cvelistv5