Lucene search
MitreCVELIST:CVE-2023-29505HistoryAug 04, 2023 - 12:00 a.m.
CVE-2023-29505
2023-08-0400:00:00
mitre
www.cve.org
4
zoho manageengine
network configuration
websocket
hijacking
cve-2023-29505
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
8.9
Confidence
High
EPSS
0.002
Percentile
56.0%
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
Related
nvd
nvd
CVE-2023-29505
2023-08-04 15:15:09
nessus
nessus
cve
cve
CVE-2023-29505
2023-08-04 15:15:09
prion
prion
Cross site scripting
2023-08-04 15:15:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
8.9
Confidence
High
EPSS
0.002
Percentile
56.0%
Related for CVELIST:CVE-2023-29505