CVE-2017-11686

PoC —

CVSS 3.0

6.1 medium

EPSS

2%p82

Published

Jul 27, 2017 (Jul 27, 2017)

Modified

Jun 17, 2026

Description

Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-SSL traffic on the network, because the password is represented in a cookie with a reversible encoding method.

Vendors: zohocorp
Products: manageengine eventlog analyzer
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.