Lucene search
MitreCVELIST:CVE-2018-12999HistoryJun 29, 2018 - 12:00 p.m.
CVE-2018-12999
2018-06-2912:00:00
mitre
www.cve.org
7
EPSS
0.076
Percentile
94.2%
Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255 allows attackers to delete certain files on the web server without login by sending a specially crafted request to the server with a computerName=…/ substring to the /agenttrayicon URI.
Related
nvd
nvd
CVE-2018-12999
2018-06-29 12:29:00
checkpoint_advisories
checkpoint_advisories
Zoho ManageEngine Desktop Central Arbitrary File Deletion (CVE-2018-12999)
2018-11-22 00:00:00
prion
prion
Improper access control
2018-06-29 12:29:00
cve
cve
CVE-2018-12999
2018-06-29 12:29:00
zdt
zdt
packetstorm
packetstorm
Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion
2018-07-22 00:00:00