Lucene search

K
cve[email protected]CVE-2023-23075
HistoryFeb 01, 2023 - 8:15 p.m.

CVE-2023-23075

2023-02-0120:15:11
CWE-79
web.nvd.nist.gov
21
cve-2023-23075
cross site scripting
xss
zoho asset explorer 6.9
security vulnerability

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.004 Low

EPSS

Percentile

73.2%

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.

Affected configurations

NVD
Node
zohocorpmanageengine_assetexplorerMatch6.9-
OR
zohocorpmanageengine_assetexplorerMatch6.96900
OR
zohocorpmanageengine_assetexplorerMatch6.96901
OR
zohocorpmanageengine_assetexplorerMatch6.96902
OR
zohocorpmanageengine_assetexplorerMatch6.96903
OR
zohocorpmanageengine_assetexplorerMatch6.96904
OR
zohocorpmanageengine_assetexplorerMatch6.96905
OR
zohocorpmanageengine_assetexplorerMatch6.96906
OR
zohocorpmanageengine_assetexplorerMatch6.96907
OR
zohocorpmanageengine_assetexplorerMatch6.96908
OR
zohocorpmanageengine_assetexplorerMatch6.96909
OR
zohocorpmanageengine_assetexplorerMatch6.96950
OR
zohocorpmanageengine_assetexplorerMatch6.96951
OR
zohocorpmanageengine_assetexplorerMatch6.96952
OR
zohocorpmanageengine_assetexplorerMatch6.96953
OR
zohocorpmanageengine_assetexplorerMatch6.96954
OR
zohocorpmanageengine_assetexplorerMatch6.96955
OR
zohocorpmanageengine_assetexplorerMatch6.96956
OR
zohocorpmanageengine_assetexplorerMatch6.96957
OR
zohocorpmanageengine_assetexplorerMatch6.96970
OR
zohocorpmanageengine_assetexplorerMatch6.96971
OR
zohocorpmanageengine_assetexplorerMatch6.96972
OR
zohocorpmanageengine_assetexplorerMatch6.96973
OR
zohocorpmanageengine_assetexplorerMatch6.96974
OR
zohocorpmanageengine_assetexplorerMatch6.96975
OR
zohocorpmanageengine_assetexplorerMatch6.96976
OR
zohocorpmanageengine_assetexplorerMatch6.96977
OR
zohocorpmanageengine_assetexplorerMatch6.96978
OR
zohocorpmanageengine_assetexplorerMatch6.96979
OR
zohocorpmanageengine_assetexplorerMatch6.96980
OR
zohocorpmanageengine_assetexplorerMatch6.96981
OR
zohocorpmanageengine_assetexplorerMatch6.96982
OR
zohocorpmanageengine_assetexplorerMatch6.96983
OR
zohocorpmanageengine_assetexplorerMatch6.96984
OR
zohocorpmanageengine_assetexplorerMatch6.96985
OR
zohocorpmanageengine_assetexplorerMatch6.96986
OR
zohocorpmanageengine_assetexplorerMatch6.96987
OR
zohocorpmanageengine_assetexplorerMatch6.96988

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.004 Low

EPSS

Percentile

73.2%

Related for CVE-2023-23075