Lucene search

K
nvd[email protected]NVD:CVE-2023-23076
HistoryFeb 01, 2023 - 8:15 p.m.

CVE-2023-23076

2023-02-0120:15:11
CWE-78
web.nvd.nist.gov
6
command injection
support center plus 11
executor
creating schedules

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

50.4%

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.

Affected configurations

Nvd
Node
zohocorpmanageengine_supportcenter_plusMatch11.0-
OR
zohocorpmanageengine_supportcenter_plusMatch11.011001
OR
zohocorpmanageengine_supportcenter_plusMatch11.011002
OR
zohocorpmanageengine_supportcenter_plusMatch11.011003
OR
zohocorpmanageengine_supportcenter_plusMatch11.011004
OR
zohocorpmanageengine_supportcenter_plusMatch11.011005
OR
zohocorpmanageengine_supportcenter_plusMatch11.011006
OR
zohocorpmanageengine_supportcenter_plusMatch11.011007
OR
zohocorpmanageengine_supportcenter_plusMatch11.011008
OR
zohocorpmanageengine_supportcenter_plusMatch11.011009
OR
zohocorpmanageengine_supportcenter_plusMatch11.011010
OR
zohocorpmanageengine_supportcenter_plusMatch11.011011
OR
zohocorpmanageengine_supportcenter_plusMatch11.011012
OR
zohocorpmanageengine_supportcenter_plusMatch11.011013
OR
zohocorpmanageengine_supportcenter_plusMatch11.011014
OR
zohocorpmanageengine_supportcenter_plusMatch11.011015
OR
zohocorpmanageengine_supportcenter_plusMatch11.011016
OR
zohocorpmanageengine_supportcenter_plusMatch11.011017
OR
zohocorpmanageengine_supportcenter_plusMatch11.011018
OR
zohocorpmanageengine_supportcenter_plusMatch11.011019
OR
zohocorpmanageengine_supportcenter_plusMatch11.011020
OR
zohocorpmanageengine_supportcenter_plusMatch11.011021
OR
zohocorpmanageengine_supportcenter_plusMatch11.011022
OR
zohocorpmanageengine_supportcenter_plusMatch11.011024
OR
zohocorpmanageengine_supportcenter_plusMatch11.011025
OR
zohocorpmanageengine_supportcenter_plusMatch11.011026
OR
zohocorpmanageengine_supportcenter_plusMatch11.011027
VendorProductVersionCPE
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11002:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11003:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11004:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11005:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11006:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11007:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11008:*:*:*:*:*:*
zohocorpmanageengine_supportcenter_plus11.0cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11009:*:*:*:*:*:*
Rows per page:
1-10 of 271

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.001

Percentile

50.4%

Related for NVD:CVE-2023-23076