CVE-2023-37308

Published: Jul 7, 2023
Updated: Jul 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-37308" target="_blank" rel="noopener"> CVE-2023-37308
Severity: Medium
Exploit:

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

CVSS v3:

CWEs:

OWASP TOP 10:

Software	From	Fixed in
zohocorp / manageengine_adaudit_plus	7.0-7002	7.0-7002.x
zohocorp / manageengine_adaudit_plus	7.0-7003	7.0-7003.x
zohocorp / manageengine_adaudit_plus	7.0-7004	7.0-7004.x
zohocorp / manageengine_adaudit_plus	7.0-7005	7.0-7005.x
zohocorp / manageengine_adaudit_plus	-	7.0
zohocorp / manageengine_adaudit_plus	7.0	7.0.x
zohocorp / manageengine_adaudit_plus	7.0-7000	7.0-7000.x
zohocorp / manageengine_adaudit_plus	7.0-7006	7.0-7006.x
zohocorp / manageengine_adaudit_plus	7.0-7007	7.0-7007.x
zohocorp / manageengine_adaudit_plus	7.0-7008	7.0-7008.x
zohocorp / manageengine_adaudit_plus	7.0-7050	7.0-7050.x
zohocorp / manageengine_adaudit_plus	7.0-7051	7.0-7051.x
zohocorp / manageengine_adaudit_plus	7.0-7052	7.0-7052.x
zohocorp / manageengine_adaudit_plus	7.0-7053	7.0-7053.x
zohocorp / manageengine_adaudit_plus	7.0-7054	7.0-7054.x
zohocorp / manageengine_adaudit_plus	7.0-7055	7.0-7055.x
zohocorp / manageengine_adaudit_plus	7.0-7060	7.0-7060.x
zohocorp / manageengine_adaudit_plus	7.0-7062	7.0-7062.x
zohocorp / manageengine_adaudit_plus	7.0-7063	7.0-7063.x
zohocorp / manageengine_adaudit_plus	7.0-7065	7.0-7065.x
zohocorp / manageengine_adaudit_plus	7.0-7080	7.0-7080.x
zohocorp / manageengine_adaudit_plus	7.0-7081	7.0-7081.x
zohocorp / manageengine_adaudit_plus	7.0-7082	7.0-7082.x
zohocorp / manageengine_adaudit_plus	7.0-7090	7.0-7090.x
zohocorp / manageengine_adaudit_plus	7.0-7091	7.0-7091.x