Approved changes feed: RSS · Atom

cpe:2.3:a:adventnet:manageengine_netflow_analyzer:6:*:*:*:*:*:*:*

part: a version: 6 update: *

VendorAdventnet (7bc9e9f9-1c72-566d-a1a1-6f3f430df2dc)
ProductManageengine Netflow Analyzer (5605d856-5381-5671-bc2e-67d0b29abb71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3594 vulnerable 2026-06-08 04:49:54.280067 Details available
Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343.
Published: 2007-07-06T18:00:00.000Z
Updated: 2024-08-07T14:21:36.387Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.