Loading vulnerability details…
CVSS v3.1
N/A
EPSS
87.04%
Published
Jan 23, 2017
Modified
May 12, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
Weaknesses (CWE)
References (16)