CVE-2007-3594

Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adventnet:manageengine_netflow_analyzer:6:*:*:*:*:*:*:*
cpe:2.3:a:adventnet:manageengine_netflow_analyzer:7:*:*:*:*:*:*:*

History

21 Nov 2024, 00:33

Type Values Removed Values Added
References () http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html - () http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html -
References () http://osvdb.org/37821 - () http://osvdb.org/37821 -
References () http://osvdb.org/37822 - () http://osvdb.org/37822 -
References () http://osvdb.org/37823 - () http://osvdb.org/37823 -
References () http://osvdb.org/37824 - () http://osvdb.org/37824 -
References () http://osvdb.org/37825 - () http://osvdb.org/37825 -
References () http://osvdb.org/38945 - () http://osvdb.org/38945 -
References () http://osvdb.org/38946 - () http://osvdb.org/38946 -
References () http://osvdb.org/38947 - () http://osvdb.org/38947 -
References () http://osvdb.org/38948 - () http://osvdb.org/38948 -
References () http://osvdb.org/38949 - () http://osvdb.org/38949 -
References () http://www.securityfocus.com/bid/24767 - Exploit () http://www.securityfocus.com/bid/24767 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/35263 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/35263 -

Information

Published : 2007-07-06 18:30

Updated : 2024-11-21 00:33


NVD link : CVE-2007-3594

Mitre link : CVE-2007-3594

CVE.ORG link : CVE-2007-3594


JSON object : View

Products Affected

adventnet

  • manageengine_netflow_analyzer