Lucene search
HistoryAug 10, 2023 - 9:15 p.m.
CVE-2023-38333
zoho
manageengine
applications manager
16530
reflected xss
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.005 Low
EPSS
Percentile
76.9%
Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.
Affected configurations
Node
zohocorpmanageengine_applications_managerRange<16.5
ORzohocorpmanageengine_applications_managerMatch16.5-
ORzohocorpmanageengine_applications_managerMatch16.5build16500
ORzohocorpmanageengine_applications_managerMatch16.5build16510
ORzohocorpmanageengine_applications_managerMatch16.5build16511
ORzohocorpmanageengine_applications_managerMatch16.5build16520
ORzohocorpmanageengine_applications_managerMatch16.5build16530
| CPE | Name | Operator | Version |
|---|---|---|---|
| zohocorp:manageengine_applications_manager | zohocorp manageengine applications manager | lt | 16.5 |
Related
cvelist
cvelist
CVE-2023-38333
2023-08-10 00:00:00
cnvd
cnvd
zdi
zdi
prion
prion
Cross site scripting
2023-08-10 21:15:00
nvd
nvd
CVE-2023-38333
2023-08-10 21:15:10
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2023-38333