ID de Prueba:	1.3.6.1.4.1.25623.1.0.812576
Categoría:	Web application abuses
Título:	ManageEngine Desktop Central <= 9.1.099 Multiple XSS Vulnerabilities
Resumen:	ManageEngine Desktop Central is prone to multiple cross-site; scripting (XSS) vulnerabilities.
Descripción:	Summary: ManageEngine Desktop Central is prone to multiple cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: The flaw allows to inject client-side script into Desktop Centrals web page. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Affected Software/OS: ManageEngine Desktop Central version 9.1.099 and prior. Solution: Update to version 9.2.026 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	BugTraq ID: 103426 Common Vulnerability Exposure (CVE) ID: CVE-2018-8722
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.