CVE-2015-2169: Zohocorp ManageEngine Assetexplorer

Medium severity, CVSS 4.3. EPSS: 7.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned.

Affected products

• Zohocorp ManageEngine Assetexplorer: version 6.1 only

Published 2015-06-24. Last modified 2026-06-17.