Lucene search
HistoryJul 28, 2023 - 2:15 a.m.
CVE-2023-38331
zoho manageengine
support center plus
stored xss
vulnerability
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.007 Low
EPSS
Percentile
80.2%
Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.
Affected configurations
Node
zohocorpmanageengine_supportcenter_plusMatch8.08015
ORzohocorpmanageengine_supportcenter_plusMatch8.18100
ORzohocorpmanageengine_supportcenter_plusMatch8.18101
ORzohocorpmanageengine_supportcenter_plusMatch8.18102
ORzohocorpmanageengine_supportcenter_plusMatch8.18117
ORzohocorpmanageengine_supportcenter_plusMatch8.18118
ORzohocorpmanageengine_supportcenter_plusMatch8.18119
ORzohocorpmanageengine_supportcenter_plusMatch8.18121
ORzohocorpmanageengine_supportcenter_plusMatch11.011000
ORzohocorpmanageengine_supportcenter_plusMatch11.011024
ORzohocorpmanageengine_supportcenter_plusMatch11.011026
ORzohocorpmanageengine_supportcenter_plusMatch11.011027
ORzohocorpmanageengine_supportcenter_plusMatch14.014000
ORzohocorpmanageengine_supportcenter_plusMatch14.014001
Related
nessus
nessus
ManageEngine SupportCenter Plus < 14.2 Build 14200
2023-11-15 00:00:00
prion
prion
Design/Logic Flaw
2023-07-28 02:15:00
cvelist
cvelist
CVE-2023-38331
2023-07-28 00:00:00
cve
cve
CVE-2023-38331
2023-07-28 02:15:10
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.007 Low
EPSS
Percentile
80.2%
Related for NVD:CVE-2023-38331