Cross-Site Scripting Vulnerability in Zoho ManageEngine AssetExplorer
CVE-2015-2169

Currently unrated

Key Information:

Vendor: Zohocorp
Status: Manageengine Assetexplorer
Vendor: CVE Published:; 24 June 2015

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2015-2169?

The Cross-Site Scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 allows remote attackers to exploit the system by injecting arbitrary web scripts or HTML. This occurs via a Publisher registry entry, which is inadequately processed during machine scans, resulting in the potential for unauthorized web manipulation and data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2015-2169 - Proof of Concept