CVE-2018-10803

MEDIUM 6.1CVE-2018-10803 · Published 10/05/2018 · updated 17/06/2026

In short

CVE-2018-10803 is a MEDIUM (CVSS 6.1) vulnerability affecting manageengine netflow analyzer (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.4% of all vulnerabilities.
Fix: update to 12.3.125 or later.

Package	Affected versions	Patched versions
manageengine netflow analyzer zohocorp	`≥ 12.3, < 12.3.125`	`12.3.125`

Description

Cross-site scripting (XSS) vulnerability in the add credentials functionality in Zoho ManageEngine NetFlow Analyzer v12.3 before 12.3.125 (build 123125) allows remote attackers to inject arbitrary web script or HTML via a crafted description value. This can be exploited through CSRF.

References

securityfocus.com/bid/104251 · Third Party Advisory
manageengine.com/products/netflow/readme.html · Vendor Advisory

More vulnerabilities in manageengine netflow analyzer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine netflow analyzer

zohocorp

≥ 12.3, < 12.3.125

12.3.125

More vulnerabilities in manageengine netflow analyzer

See all →