CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. It may be remotely exploitable.
CVE
CVE-2020-27449
Severity
MEDIUM
CVSS
6.1
EPSS
2.82%
Java
Original NVD Description
Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote attackers to execute arbitrary code and steal cookies via crafted JavaScript payload.
Related CVEs
Other vulnerabilities affecting the same vendor(s)