Cross-Site Scripting Vulnerability in Zoho NetFlow Analyzer
CVE-2015-2960

Currently unrated

Key Information:

Vendor

Zohocorp
Status
Manageengine Netflow Analyzer
Vendor
CVE Published:
9 June 2015

What is CVE-2015-2960?

A cross-site scripting vulnerability exists in the Zoho NetFlow Analyzer, specifically in build 10250 and earlier versions. This weakness allows remote attackers to inject arbitrary web scripts or HTML into the application through unspecified vectors, potentially compromising user sessions or redirecting users to malicious sites.

References

http://www.securityfocus.com/bid/75071
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032516
vdb-entryx_refsource_SECTRACK
http://jvn.jp/en/jp/JVN98447310/index.html
third-party-advisoryx_refsource_JVN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.