GCVE-110-CERTCC-2012-571068

Advisory PublishedCVSS 7.8/10

Vulnetix · Advisory published November 30, 2012

ManageEngine AssetExplorer version 5.6.0 build number 5610 and possibly older versions is vulnerable to multiple stored XSS vulnerabilities via XML asset data submission.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.8/10

High · AV:N/AC:M/Au:N/C:P/I:C/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact2d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.5remediation_levelOFreport_confidenceUCenvironmental_score1.5target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-5956

Transitive aliases

GSD-2012-5956 GHSA-4whp-rm78-qmqj

References

ManageEngine AssetExplorer fails to properly sanitize XML asset data submission

url

ManageEngine AssetExplorer fails to properly sanitize XML asset data submission

url

ManageEngine AssetExplorer fails to properly sanitize XML asset data submission

url

ManageEngine AssetExplorer fails to properly sanitize XML asset data submission

advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON