Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2020-27449

Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload.

  • Published: Aug 11, 2023
  • Updated: Aug 17, 2023
  • CVE: CVE-2020-27449
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
zohocorp / manageengine_password_manager_pro 11.1-build_11101 11.1-build_11101.x