CVE-2022-25373

Published: Apr 5, 2022Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.

Products: Zohocorp: Manageengine Supportcenter Plus

1 product

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Supportcenter Plus	Before 11.0
Zohocorp Manageengine Supportcenter Plus	Version 11.0
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11000
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11001
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11002
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11003
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11004
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11005
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11006
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11007
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11008
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11009
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11010
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11011
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11012
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11013
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11014
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11015
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11016
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11017
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11018
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11019