CVE-2016-9490

概要

参考情報

• seclists.org/fulldisclosure/2017/Apr/9 · Mailing List
• securityfocus.com/bid/97394 · Third Party Advisory
• packetstormsecurity.com/files/142022/ManageEngine-Applications-Manager-12-13-XSS-SQL-Injection-Code-Execution.html · Third Party Advisory
• manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9490.html

applications manager のその他の脆弱性

• CVE-2016-9488緊急 9.8ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated…
• CVE-2012-1063高 7.5Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL com…
• CVE-2012-1062中 4.3Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbit…
• CVE-2008-1566中 4.3Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary w…
• CVE-2008-0476中 6.4ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows …