Design/Logic Flaw

2023-07-2802:15:00

PRIOn knowledge base

www.prio-n.com

zoho manageengine

support center plus

stored xss

5.1 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%

JSON

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

CPENameOperatorVersion
manageengine_supportcenter_pluseq11.0 11000
manageengine_supportcenter_pluseq11.0 11024
manageengine_supportcenter_pluseq11.0 11026
manageengine_supportcenter_pluseq11.0 11027
manageengine_supportcenter_pluseq14.0 14000
manageengine_supportcenter_pluseq14.0 14001
manageengine_supportcenter_pluseq8.0 8015
manageengine_supportcenter_pluseq8.1 8100
manageengine_supportcenter_pluseq8.1 8101
manageengine_supportcenter_pluseq8.1 8102

Name	Operator	Version
manageengine_supportcenter_plus	eq	11.0 11000
manageengine_supportcenter_plus	eq	11.0 11024
manageengine_supportcenter_plus	eq	11.0 11026
manageengine_supportcenter_plus	eq	11.0 11027
manageengine_supportcenter_plus	eq	14.0 14000
manageengine_supportcenter_plus	eq	14.0 14001
manageengine_supportcenter_plus	eq	8.0 8015
manageengine_supportcenter_plus	eq	8.1 8100
manageengine_supportcenter_plus	eq	8.1 8101
manageengine_supportcenter_plus	eq	8.1 8102