Approved changes feed: RSS · Atom

cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.1:*:*:*:*:*:*:*

part: a version: 6.1 update: *

VendorZohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502)
ProductManageengine Assetexplorer (95a2695d-1598-5999-aaf5-a63607258ba3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5061 vulnerable 2026-06-03 14:34:58.400070 Details available
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do.
Published: 2015-06-24T14:00:00.000Z
Updated: 2024-08-06T06:32:32.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2169 vulnerable 2026-06-03 14:34:41.539336 Details available
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned.
Published: 2015-06-24T14:00:00.000Z
Updated: 2024-08-06T05:10:16.039Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.