HTTP: Zoho ManageEngine OpManager Business View Background Image Cross Site Scripting
This signature detects attempts to exploit a known vulnerability against Zoho ManageEngine OpManager. Successful exploitation could result in unrestricted file upload and possible further attacks like persistent Cross Site Scripting.
Extended Description
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
Affected Products
Zohocorp manageengine_opmanager
Short Name
HTTP:XSS:ZOHO-OPM-BUSINESS-IMG
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Background Business CVE-2018-18475 Cross Image ManageEngine OpManager Scripting Site View Zoho
Release Date
12/05/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3337
False Positive
Unknown
Vendors
Zohocorp
CVSS Score
7.5