VulnerabilityModified
CVE-2011-5105
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a…
MEDIUM 4.3EPSS 5.98%
Does this matter?
Lower severity and a low EPSS score (5.98%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 5.98% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- zohocorp/manageengine adselfservice plus
- Source
- cve@mitre.org
References
- http://jameswebb.me/vulns/vrpth-2011-001.txtExploit
- http://www.securityfocus.com/archive/1/520562/100/0/threaded
- http://www.securityfocus.com/bid/50717Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71395
- http://jameswebb.me/vulns/vrpth-2011-001.txtExploit
- http://www.securityfocus.com/archive/1/520562/100/0/threaded
- http://www.securityfocus.com/bid/50717Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71395
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.