CVE-2023-28341

Published: Apr 11, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page.

Affected (7)

Products: Zohocorp: Manageengine Applications Manager

Zohocorp

1 product

Manageengine Applications Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Applications Manager	From 16.0 to 16.3
Zohocorp Manageengine Applications Manager	Version 15.9 build15990
Zohocorp Manageengine Applications Manager	Version 16.3 build16300
Zohocorp Manageengine Applications Manager	Version 16.3 build16310
Zohocorp Manageengine Applications Manager	Version 16.3 build16320
Zohocorp Manageengine Applications Manager	Version 16.3 build16330
Zohocorp Manageengine Applications Manager	Version 16.3 build16340