CVE-2018-12996

概要

参考情報

• packetstormsecurity.com/files/148635/Zoho-ManageEngine-13-13790-build-XSS-File-Read-File-Deletion.html · Exploit
• seclists.org/fulldisclosure/2018/Jul/71 · Exploit
• cnnvd.org.cn/web/xxk/ldxqById.tag · Third Party Advisory
• unh3x/just4cve · Exploit
• manageengine.com/products/applications_manager/issues.html · Vendor Advisory
• manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-12996.html · Vendor Advisory

manageengine applications manager のその他の脆弱性

• CVE-2025-9787中 6.1Zohocorp ManageEngine Applications Manager versions 177400 and below are vulnerable to Stored Cross-Site Scripting vulnerability in the NOC …
• CVE-2025-6239中 6.5Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor.
• CVE-2025-27930中 5.4Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory mon…
• CVE-2024-41140中 6.5Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in the update user functi…
• CVE-2024-5678中 4.7Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Cre…