Approved changes feed: RSS · Atom

cpe:2.3:a:manageengine:eventlog_analyzer:6.1:*:*:*:*:*:*:*

part: a version: 6.1 update: *

VendorManageengine (b7eba64e-d5d7-5395-be8c-84fe138ee37e)
ProductEventlog Analyzer (9991b31e-fd29-5e6a-94cf-7847248a4999)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4841 vulnerable 2026-06-03 14:30:44.259405 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine EventLog Analyzer 6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HOST_ID, (2) OS, (3) GROUP, (4) exportFile, (5) load, (6) type, or (7) tab parameter to INDEX.do, the (8) reported parameter to INDEX2.do, the (9) gId parameter to hostlist.do, the (10) newWindow parameter to globalSettings.do, or the (11) STATUS parameter to enableHost.do. Fixed in Build 9000.
Published: 2011-09-27T19:00:00.000Z
Updated: 2024-08-07T04:02:30.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4840 vulnerable 2026-06-03 14:30:44.259048 Details available
Multiple buffer overflows in the Syslog server in ManageEngine EventLog Analyzer 6.1 allow remote attackers to cause a denial of service (SysEvttCol.exe process crash) or possibly execute arbitrary code via a long Syslog PRI message header to UDP port (1) 513 or (2) 514. Fixed in 7.2 Build 7020.
Published: 2011-09-27T19:00:00.000Z
Updated: 2024-08-07T04:02:30.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.