6.1

CVE-2023-23075

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update -
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6900
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6901
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6902
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6903
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6904
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6905
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6906
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6907
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6908
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6909
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6950
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6951
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6952
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6953
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6954
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6955
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6956
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6957
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6970
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6971
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6972
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6973
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6974
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6975
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6976
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6977
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6978
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6979
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6980
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6981
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6982
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6983
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6984
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6985
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6986
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6987
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6988
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.63% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADP 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator
Vendor Advisory
Not Applicable