| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine eventlog analyzer | = 11.4= 11.5 |
Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free