Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
ZOHO ManageEngine Network Configuration Manager 访问控制错误漏洞
Vulnerability Description
ZOHO ManageEngine Network Configuration Manager是美国卓豪（ZOHO）公司的一种多供应商网络变更、配置和合规性管理 (Nccm) 解决方案。用于自动化并全面控制设备配置管理的整个生命周期。 ZOHO ManageEngine Network Configuration Manager 12.6.165版本存在安全漏洞，该漏洞源于存在跨站WebSocket劫持问题。
CVSS Information
N/A
Vulnerability Type
N/A