{"id":"CVE-2018-15740","aliases":["EUVD-2018-7609","GHSA-mx3h-fqv5-2p56"],"status":"published","title":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\"...","description":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06141,"percentile":0.935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2018-08-28T19:00:00Z","modified":"2026-06-17T01:43:02Z","exploits":[{"source":"exploitdb","id":"EDB-45256","title":"ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting","type":"webapps","platform":"windows_x86-64","date":"2018-08-26","url":"https://www.exploit-db.com/exploits/45256"}],"products":[{"vendor":"zohocorp","product":"manageengine_admanager_plus"}],"references":[{"url":"https://www.exploit-db.com/exploits/45256/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76a0hwbFFVLVRMMjYxc05VV2JYc21NLXJiSHhJ","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://drive.google.com/open?id=0Bw8rxEHEov76cUVxZUxWS3lIanZ1VjhxSVBhdHBHUmJ1dmhr","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://packetstormsecurity.com/files/149097/ManageEngine-ADManager-Plus-6.5.7-Cross-Site-Scripting.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15740"},{"url":"https://github.com/advisories/GHSA-mx3h-fqv5-2p56"}],"sources":{"cve":[{"id":"CVE-2018-15740","description":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen.","status":"published","published":"2018-08-28T19:00:00Z","modified":"2024-08-05T10:01:54.64Z","updated_at":"2026-11-02T14:35:03.288698Z"}],"euvd":[{"id":"EUVD-2018-7609","description":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen.","status":"published","published":"2018-08-28T19:00:00Z","modified":"2024-08-05T10:01:54Z","updated_at":"2026-11-03T02:39:43.665553Z"}],"ghsa":[{"id":"GHSA-mx3h-fqv5-2p56","title":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\"...","description":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen.","status":"published","published":"2022-05-13T01:25:15Z","modified":"2023-02-01T05:07:15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:50:30.568005Z"}],"nvd":[{"id":"CVE-2018-15740","description":"Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the \"Workflow Delegation\" \"Requester Roles\" screen.","status":"published","published":"2018-08-28T19:29:17.49Z","modified":"2026-06-17T01:43:02.163Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:36.842579Z"}]}}