Device Expert
1 CVEs
product
Monthly
ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 67.6%.
Zoho
Information Disclosure
Device Expert
NVD
Exploit-DB
CVSS 2.0
5.0
EPSS
67.6%
Threat
4.5
EPSS 68%
4.5
CVSS 5.0
MEDIUM
POC
PATCH
THREAT
This Month
ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via a direct request. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 67.6%.
Zoho
Information Disclosure
Device Expert
NVD
Exploit-DB