CVE-2022-25373

Published: Apr 5, 2022
Updated: Apr 14, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2022-25373" target="_blank" rel="noopener"> CVE-2022-25373
Severity: Medium
Exploit:

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.

CVSS v3:

CVSS v2:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
zohocorp / manageengine_supportcenter_plus	11.0-11014	11.0-11014.x
zohocorp / manageengine_supportcenter_plus	11.0-11013	11.0-11013.x
zohocorp / manageengine_supportcenter_plus	11.0-11012	11.0-11012.x
zohocorp / manageengine_supportcenter_plus	11.0-11011	11.0-11011.x
zohocorp / manageengine_supportcenter_plus	11.0-11010	11.0-11010.x
zohocorp / manageengine_supportcenter_plus	11.0-11009	11.0-11009.x
zohocorp / manageengine_supportcenter_plus	11.0-11008	11.0-11008.x
zohocorp / manageengine_supportcenter_plus	11.0-11007	11.0-11007.x
zohocorp / manageengine_supportcenter_plus	11.0-11006	11.0-11006.x
zohocorp / manageengine_supportcenter_plus	11.0-11005	11.0-11005.x
zohocorp / manageengine_supportcenter_plus	11.0-11004	11.0-11004.x
zohocorp / manageengine_supportcenter_plus	11.0-11003	11.0-11003.x
zohocorp / manageengine_supportcenter_plus	11.0-11002	11.0-11002.x
zohocorp / manageengine_supportcenter_plus	11.0-11001	11.0-11001.x
zohocorp / manageengine_supportcenter_plus	11.0-11000	11.0-11000.x
zohocorp / manageengine_supportcenter_plus	11.0	11.0.x
zohocorp / manageengine_supportcenter_plus	11.0-11015	11.0-11015.x
zohocorp / manageengine_supportcenter_plus	11.0-11016	11.0-11016.x
zohocorp / manageengine_supportcenter_plus	11.0-11017	11.0-11017.x
zohocorp / manageengine_supportcenter_plus	11.0-11018	11.0-11018.x
zohocorp / manageengine_supportcenter_plus	11.0-11019	11.0-11019.x
zohocorp / manageengine_supportcenter_plus	-	11.0