Lucene search
HistoryJul 07, 2023 - 1:15 p.m.
CVE-2023-37308
zoho
adaudit plus
7100
xss
vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.008 Low
EPSS
Percentile
81.5%
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.
Affected configurations
Node
zohocorpmanageengine_adaudit_plusRange<7.0
ORzohocorpmanageengine_adaudit_plusMatch7.0-
ORzohocorpmanageengine_adaudit_plusMatch7.07000
ORzohocorpmanageengine_adaudit_plusMatch7.07002
ORzohocorpmanageengine_adaudit_plusMatch7.07003
ORzohocorpmanageengine_adaudit_plusMatch7.07004
ORzohocorpmanageengine_adaudit_plusMatch7.07005
ORzohocorpmanageengine_adaudit_plusMatch7.07006
ORzohocorpmanageengine_adaudit_plusMatch7.07007
ORzohocorpmanageengine_adaudit_plusMatch7.07008
ORzohocorpmanageengine_adaudit_plusMatch7.07050
ORzohocorpmanageengine_adaudit_plusMatch7.07051
ORzohocorpmanageengine_adaudit_plusMatch7.07052
ORzohocorpmanageengine_adaudit_plusMatch7.07053
ORzohocorpmanageengine_adaudit_plusMatch7.07054
ORzohocorpmanageengine_adaudit_plusMatch7.07055
ORzohocorpmanageengine_adaudit_plusMatch7.07060
ORzohocorpmanageengine_adaudit_plusMatch7.07062
ORzohocorpmanageengine_adaudit_plusMatch7.07063
ORzohocorpmanageengine_adaudit_plusMatch7.07065
ORzohocorpmanageengine_adaudit_plusMatch7.07080
ORzohocorpmanageengine_adaudit_plusMatch7.07081
ORzohocorpmanageengine_adaudit_plusMatch7.07082
ORzohocorpmanageengine_adaudit_plusMatch7.07090
ORzohocorpmanageengine_adaudit_plusMatch7.07091
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_adaudit_plus | zohocorp manageengine adaudit plus | lt | 7.0 |
Related
cvelist
cvelist
CVE-2023-37308
2023-07-07 00:00:00
nessus
nessus
ManageEngine ADAudit Plus < Build 7100 XSS
2023-07-13 00:00:00
nvd
nvd
CVE-2023-37308
2023-07-07 13:15:09
prion
prion
Cross site scripting
2023-07-07 13:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2023-37308