Zohocorp Firewall Analyzer vulnerabilities

2 CVEs affecting Zohocorp Firewall Analyzer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-12998, published 2018-06-29.

More from Zohocorp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-12998, published 2018-06-29. Medium severity, CVSS 6.1. EPSS: 99.3% chance of exploitation in the next 30 days. A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148,…
• CVE-2018-12997, published 2018-06-29. High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days. Incorrect Access Control in FailOverHelperServlet in Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils…