CVE-2020-19554 – Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager

5 years ago

Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174 when the API key contains an XML-based XSS payload. Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19554 Reference (s):

https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125177