CVE-2018-18475

XSS vulnerability

 

Vulnerability Details
ImpactCVSS V3 rating: 10 (Critical)
Reported10 Sept 2018
Fixed10 Oct 2018
Affected BuildsTill Build 123208
Fixed inBuild 123214
OverviewUnrestricted file upload vulnerability in Business view.
Recommended FixUpgrade to OpManager Version 12.3.239 or above.

 

Description

An unrestricted file upload vulnerability was discovered in OpManager before version 12.3.214. This occurred when uploading a background image in Business view. We recommend that you upgrade to OpManager Version 12.3.214 or above to fix this issue.

Source and Acknowledgements

Find out more about CVE-2018-18475 from the CVE dictionary.

Need Help?

For clarification or corrections please contact our support team or email us at opmanager-support@manageengine.com.