CVE-2023-38331 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2023-38331

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

Published: Jul 28, 2023
Updated: Aug 4, 2023
CVE: CVE-2023-38331
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.4
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_supportcenter_plus	11.0-11000	11.0-11000.x
zohocorp / manageengine_supportcenter_plus	11.0-11024	11.0-11024.x
zohocorp / manageengine_supportcenter_plus	11.0-11026	11.0-11026.x
zohocorp / manageengine_supportcenter_plus	11.0-11027	11.0-11027.x
zohocorp / manageengine_supportcenter_plus	14.0-14000	14.0-14000.x
zohocorp / manageengine_supportcenter_plus	14.0-14001	14.0-14001.x
zohocorp / manageengine_supportcenter_plus	8.0-8015	8.0-8015.x
zohocorp / manageengine_supportcenter_plus	8.1-8100	8.1-8100.x
zohocorp / manageengine_supportcenter_plus	8.1-8101	8.1-8101.x
zohocorp / manageengine_supportcenter_plus	8.1-8102	8.1-8102.x
zohocorp / manageengine_supportcenter_plus	8.1-8117	8.1-8117.x
zohocorp / manageengine_supportcenter_plus	8.1-8118	8.1-8118.x
zohocorp / manageengine_supportcenter_plus	8.1-8119	8.1-8119.x
zohocorp / manageengine_supportcenter_plus	8.1-8121	8.1-8121.x