Lucene search
HistoryFeb 01, 2023 - 8:15 p.m.
CVE-2023-23077
cve-2023-23077
cross site scripting
xss
zoho manageengine servicedesk plus 13
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
58.6%
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment.
Affected configurations
Node
zohocorpmanageengine_servicedesk_plusMatch13.0-
ORzohocorpmanageengine_servicedesk_plusMatch13.013000
ORzohocorpmanageengine_servicedesk_plusMatch13.013001
ORzohocorpmanageengine_servicedesk_plusMatch13.013002
ORzohocorpmanageengine_servicedesk_plusMatch13.013003
ORzohocorpmanageengine_servicedesk_plusMatch13.013004
ORzohocorpmanageengine_servicedesk_plusMatch13.013005
ORzohocorpmanageengine_servicedesk_plusMatch13.013006
ORzohocorpmanageengine_servicedesk_plusMatch13.013007
ORzohocorpmanageengine_servicedesk_plusMatch13.013008
ORzohocorpmanageengine_servicedesk_plusMatch13.013009
ORzohocorpmanageengine_servicedesk_plusMatch13.013010
ORzohocorpmanageengine_servicedesk_plusMatch13.013011
ORzohocorpmanageengine_servicedesk_plusMatch13.013012
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_servicedesk_plus | zohocorp manageengine servicedesk plus | eq | 13.0 |
Related
nvd
nvd
CVE-2023-23077
2023-02-01 20:15:12
prion
prion
Cross site scripting
2023-02-01 20:15:00
nessus
nessus
ManageEngine ServiceDesk Plus < 14.0 Build 14003
2023-11-15 00:00:00
cvelist
cvelist
CVE-2023-23077
2023-02-01 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
58.6%
Related for CVE-2023-23077