Cross site scripting

2023-02-0120:15:00

PRIOn knowledge base

www.prio-n.com

zoho asset explorer

xss vulnerability

6.9

credential name

assets workstation

nvd

0.004 Low

EPSS

Percentile

73.2%

JSON

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.

CPENameOperatorVersion
manageengine_assetexplorereq6.9 6900
manageengine_assetexplorereq6.9 6901
manageengine_assetexplorereq6.9 6902
manageengine_assetexplorereq6.9 6903
manageengine_assetexplorereq6.9 6904
manageengine_assetexplorereq6.9 6905
manageengine_assetexplorereq6.9 6906
manageengine_assetexplorereq6.9 6907
manageengine_assetexplorereq6.9 6908
manageengine_assetexplorereq6.9 6909

Name	Operator	Version
manageengine_assetexplorer	eq	6.9 6900
manageengine_assetexplorer	eq	6.9 6901
manageengine_assetexplorer	eq	6.9 6902
manageengine_assetexplorer	eq	6.9 6903
manageengine_assetexplorer	eq	6.9 6904
manageengine_assetexplorer	eq	6.9 6905
manageengine_assetexplorer	eq	6.9 6906
manageengine_assetexplorer	eq	6.9 6907
manageengine_assetexplorer	eq	6.9 6908
manageengine_assetexplorer	eq	6.9 6909

Rows per page:

1-10 of 381

References

bugbounty.zohocorp.com/bb/

0.004 Low

EPSS

Percentile

73.2%

JSON

Related for PRION:CVE-2023-23075