CVE-2019-12597: Zohocorp ManageEngine Assetexplorer

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName.

Affected products

• Zohocorp ManageEngine Assetexplorer: version 6.5 only

Published 2019-07-11. Last modified 2026-06-17.