CVE-2020-15521

Summary

CVE	CVE-2020-15521
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-09-25 07:15:00 UTC
Updated	2020-09-30 14:37:00 UTC
Description	Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .

Risk And Classification

Problem Types: CWE-79

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Zohocorp	Manageengine Applications Manager	All	All	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	-	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14000	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14010	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14020	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14030	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14040	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14050	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14060	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14070	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14071	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14072	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14073	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14080	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14090	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14100	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14110	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14120	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14130	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14140	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14150	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14160	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14170	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14180	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14190	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14200	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14210	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14220	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14230	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14240	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14250	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14260	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14261	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14262	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14270	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14280	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14290	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14300	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14310	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14330	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14331	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14332	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14340	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14350	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14360	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14361	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14370	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14380	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14390	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14400	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14401	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14410	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14420	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14430	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14440	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14450	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14460	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14470	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14480	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14490	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14500	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14510	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14520	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14530	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14531	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14532	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14533	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14540	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14550	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14560	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14570	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14580	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14590	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14600	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14610	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14620	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14630	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14660	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14670	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14681	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14682	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14683	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14684	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14685	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14690	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14700	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14710	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14720	All	All
Application	Zohocorp	Manageengine Applications Manager	All	All	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	-	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14000	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14010	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14020	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14030	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14040	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14050	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14060	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14070	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14071	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14072	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14073	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14080	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14090	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14100	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14110	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14120	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14130	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14140	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14150	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14160	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14170	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14180	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14190	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14200	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14210	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14220	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14230	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14240	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14250	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14260	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14261	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14262	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14270	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14280	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14290	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14300	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14310	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14330	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14331	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14332	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14340	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14350	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14360	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14361	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14370	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14380	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14390	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14400	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14401	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14410	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14420	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14430	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14440	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14450	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14460	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14470	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14480	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14490	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14500	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14510	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14520	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14530	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14531	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14532	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14533	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14540	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14550	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14560	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14570	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14580	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14590	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14600	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14610	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14620	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14630	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14660	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14670	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14681	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14682	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14683	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14684	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14685	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14690	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14700	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14710	All	All
Application	Zohocorp	Manageengine Applications Manager	14.0	build14720	All	All

References

Reference	Source	Link	Tags
ManageEngine - IT Operations and Service Management Software	MISC	www.manageengine.com	Product
Download ManageEngine Applications Manager - Free Edition and Professional Edition Trial	CONFIRM	www.manageengine.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.