CVE:CVE-2019-16268
CNNVD:CNNVD-202102-231
ZOHO ManageEngine Remote Access Plus是美国卓豪（ZOHO）公司的一套远程访问解决方案。
Zoho ManageEngine Remote Access Plus 10.0.259 存在注入漏洞，该漏洞允许通过Admin - User Administration userMgmt.do?actionToCall=ShowUser字段注入HTML。
solution:Upgrade zohocorp manageengine_remote_access_plus to a higher version than 10.0.259,and avoid the version 10.0.259