CVE-2015-2169

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.74%

Published

Jun 24, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned.

Weaknesses (CWE)

CWE-79

Affected Products (1)

zohocorp · manageengine_assetexplorervulnerable

References (10)

http://packetstormsecurity.com/files/132433/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html

http://seclists.org/fulldisclosure/2015/Jun/74

Exploit

http://techtootech.blogspot.in/2015/06/found-xss-vulnerability-in-manage.html

Exploit

http://www.securityfocus.com/bid/75389

https://www.exploit-db.com/exploits/37395/

Exploit

http://packetstormsecurity.com/files/132433/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html

http://seclists.org/fulldisclosure/2015/Jun/74

KEV Catalog EPSS Scores Vendors All CVEs