CVE-2008-0474 - CVE House

Back to Database

Status published Medium CVE-2008-0474

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1...

4.3 CVSS

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arbitrary web script or HTML via the (1) showlink parameter to jsp/DiscoveryProfiles.jsp; the (2) attributeIDs, (3) attributeToSelect, (4) redirectto, and (5) resourceid parameters to (a) jsp/ThresholdActionConfiguration.jsp; the (6) page and (7) redirect parameters to (b) jsp/UpdateGlobalSettings.jsp; and the (8) haid and (9) returnpath parameters to (c) showTile.do. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0474

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from manageengine

View All →

Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command...

Cross Site Scripting (XSS) vulnerability exists in ManageEngine OPManager <=12.5.174...

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the...

The FileUploadServlet class in ManageEngine Desktop Central 9 before build...

ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows...

Affected Vendor

manageengine

View all reports →

Affected Software

applications manager

Vulnerable Versions:

8.1_build_8100

Timeline

Official Publish: January 29th, 2008

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.