ZohoCorp ManageEngine NetFlow Analyzer
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_netflow_analyzer:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Netflow Analyzer (416246d7-4293-566a-9c10-cb82f3af80b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-12998 |
vulnerable | 2026-06-08 05:10:42.196879 |
Details available
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows remote attackers to inject arbitrary web script or HTML via the parameter 'operation' to /servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.
Published: 2018-06-29T12:00:00.000Z
Updated: 2024-08-05T08:52:49.220Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12997 |
vulnerable | 2026-06-08 05:10:42.193445 |
Details available
Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 allows attackers to read certain files on the web server without login by sending a specially crafted request to the server with the operation=copyfile&fileName= substring.
Published: 2018-06-29T12:00:00.000Z
Updated: 2024-08-05T08:52:49.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4418 |
vulnerable | 2026-06-08 05:06:39.823104 |
Details available
Zoho NetFlow Analyzer build 10250 and earlier does not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published: 2015-06-09T00:00:00.000Z
Updated: 2024-08-06T06:11:12.999Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2961 |
vulnerable | 2026-06-08 05:06:36.302416 |
Details available
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators.
Published: 2015-06-09T00:00:00.000Z
Updated: 2024-08-06T05:32:21.062Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2960 |
vulnerable | 2026-06-08 05:06:36.302087 |
Details available
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-06-09T00:00:00.000Z
Updated: 2024-08-06T05:32:20.705Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2959 |
vulnerable | 2026-06-08 05:06:36.301667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.