How severe is CVE-2007-3594?

CVE-2007-3594 has a CVSS 2.0 base score of 2.6, rated low severity.

Is CVE-2007-3594 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 6% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-3594?

CVE-2007-3594 primarily affects Adventnet Manageengine Netflow Analyzer. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-3594?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-3594 published?

CVE-2007-3594 was published on 2007-07-06 and last updated on 2026-06-16.

CVE-2007-3594

CVE-2007-3594 is a low-severity vulnerability in Adventnet Manageengine Netflow Analyzer with a CVSS 2.0 base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.6)
EPSS exploit prediction: 6% (92nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Adventnet Manageengine Netflow Analyzer
Published: 2007-07-06
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343.

Frequently asked questions

What is CVE-2007-3594?: Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do. NOTE: the searchTerm parameter in Search.do is already covered by CVE-2006-2343.
How severe is CVE-2007-3594?: CVE-2007-3594 has a CVSS 2.0 base score of 2.6, rated low severity.
Is CVE-2007-3594 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 6% (92nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-3594?: CVE-2007-3594 primarily affects Adventnet Manageengine Netflow Analyzer. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2007-3594?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-3594 published?: CVE-2007-3594 was published on 2007-07-06 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:adventnet:manageengine_netflow_analyzer:6:*:*:*:*:*:*:*
cpe:2.3:a:adventnet:manageengine_netflow_analyzer:7:*:*:*:*:*:*:*

More vulnerabilities in Adventnet Manageengine Netflow Analyzer

CVE-2007-3593 — Medium (CVSS 4.3): Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject…
CVE-2005-3522 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to…

All CVEs affecting Adventnet Manageengine Netflow Analyzer →