Cross site request forgery (csrf)

2022-04-0519:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.8%

JSON

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.

CPENameOperatorVersion
manageengine_supportcenter_pluseq11.0 11014
manageengine_supportcenter_pluseq11.0 11013
manageengine_supportcenter_pluseq11.0 11012
manageengine_supportcenter_pluseq11.0 11011
manageengine_supportcenter_pluseq11.0 11010
manageengine_supportcenter_pluseq11.0 11009
manageengine_supportcenter_pluseq11.0 11008
manageengine_supportcenter_pluseq11.0 11007
manageengine_supportcenter_pluseq11.0 11006
manageengine_supportcenter_pluseq11.0 11005

Name	Operator	Version
manageengine_supportcenter_plus	eq	11.0 11014
manageengine_supportcenter_plus	eq	11.0 11013
manageengine_supportcenter_plus	eq	11.0 11012
manageengine_supportcenter_plus	eq	11.0 11011
manageengine_supportcenter_plus	eq	11.0 11010
manageengine_supportcenter_plus	eq	11.0 11009
manageengine_supportcenter_plus	eq	11.0 11008
manageengine_supportcenter_plus	eq	11.0 11007
manageengine_supportcenter_plus	eq	11.0 11006
manageengine_supportcenter_plus	eq	11.0 11005