CVE-2012-5956

MEDIO 4.3CVE-2012-5956 · Published 11/12/2012 · updated 16/06/2026

En resumen

CVE-2012-5956 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a manageengine assetexplorer (zohocorp).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.1%, mayor que el 90.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
manageengine assetexplorer zohocorp	`≤ 5.6`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/Computer_Information/output element.

References

kb.cert.org/vuls/id/571068 · Third Party Advisory
manageengine.com/products/asset-explorer/sp-readme.html · Vendor Advisory

Más vulnerabilidades de manageengine assetexplorer

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine assetexplorer

zohocorp

≤ 5.6

No fix yet

Description

Más vulnerabilidades de manageengine assetexplorer

Ver todo →