{
    "id": "CVE-2007-3593",
    "published": "2007-07-06 18:30:00",
    "last_modified": "2026-06-16 22:42:20",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": "CWE-79",
    "description": "Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web script or HTML via the (1) alpha parameter in (a) netflow/jspui/applicationList.jsp, the (2) task parameter in (b) netflow/jspui/appConfig.jsp, the (3) view parameter in (c) netflow/jspui/index.jsp, and the (4) rtype parameter in (d) netflow/jspui/selectDevice.jsp and (e) netflow/jspui/customReport.jsp. NOTE: it was later reported that vector 3 also affects 7.5 build 7500.",
    "epss_score": "0.04103",
    "epss_percentile": "0.90451",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-03 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "adventnet",
            "product": "manageengine_netflow_analyzer"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "30266",
            "title": "NetFlow Analyzer 5 - '/jspui/applicationList.jsp?alpha' Cross-Site Scripting",
            "date": "2007-07-04",
            "url": "https://www.exploit-db.com/exploits/30266"
        },
        {
            "source": "exploit-db",
            "ref_id": "30267",
            "title": "NetFlow Analyzer 5 - '/jspui/appConfig.jsp?task' Cross-Site Scripting",
            "date": "2007-07-04",
            "url": "https://www.exploit-db.com/exploits/30267"
        },
        {
            "source": "exploit-db",
            "ref_id": "30268",
            "title": "NetFlow Analyzer 5 - 'netflow/jspui/index.jsp?view' Cross-Site Scripting",
            "date": "2007-07-04",
            "url": "https://www.exploit-db.com/exploits/30268"
        },
        {
            "source": "exploit-db",
            "ref_id": "30269",
            "title": "NetFlow Analyzer 5 - '/jspui/selectDevice.jsp?rtype' Cross-Site Scripting",
            "date": "2007-07-04",
            "url": "https://www.exploit-db.com/exploits/30269"
        },
        {
            "source": "exploit-db",
            "ref_id": "30270",
            "title": "NetFlow Analyzer 5 - '/jspui/customReport.jsp?rtype' Cross-Site Scripting",
            "date": "2007-07-04",
            "url": "https://www.exploit-db.com/exploits/30270"
        }
    ],
    "refs_list": [
        "http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html",
        "http://osvdb.org/37826",
        "http://osvdb.org/37827",
        "http://osvdb.org/37828",
        "http://osvdb.org/37829",
        "http://osvdb.org/37830",
        "http://secunia.com/advisories/25947",
        "http://www.securityfocus.com/bid/24766",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/35263",
        "http://lostmon.blogspot.com/2007/07/netflow-analizer-5-opmanager-7-multiple.html",
        "http://osvdb.org/37826",
        "http://osvdb.org/37827",
        "http://osvdb.org/37828",
        "http://osvdb.org/37829",
        "http://osvdb.org/37830",
        "http://secunia.com/advisories/25947",
        "http://www.securityfocus.com/bid/24766",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/35263"
    ]
}