Lucene search

K
nvd0fc0942c-577d-436f-ae8e-945763c79b02NVD:CVE-2024-36038
HistoryJun 24, 2024 - 12:15 p.m.

CVE-2024-36038

2024-06-2412:15:09
CWE-79
0fc0942c-577d-436f-ae8e-945763c79b02
web.nvd.nist.gov
4
zoho manageengine
itom
stored xss
proxy server
vulnerability

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Zoho ManageEngine ITOM products versions fromΒ 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option.

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-36038