CVE-2018-17596 – ManageEngine AssetExplorer 6.2.0 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2018-17596

29 Sep 2018 — In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do ciName or assetName parameter. En Zoho ManageEngine AssetExplorer, se ha descubierto una vulnerabilidad de Cross-Site Scripting (XSS) persistente en la versión 6.2.0 mediante los parámetros ciName o assetName en /AssetDef.do. • https://packetstorm.news/files/id/149597 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •