← Back

CVE-2023-37308

nvd nist
Published: Jul 7, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD

Description

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

Affected (25)

Zohocorp
1 product
Manageengine Adaudit Plus
Configuration A
25 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Adaudit Plus
Before 7.0
Manageengine Adaudit Plus
Version 7.0
Manageengine Adaudit Plus
Version 7.0 7000
Manageengine Adaudit Plus
Version 7.0 7002
Manageengine Adaudit Plus
Version 7.0 7003
Manageengine Adaudit Plus
Version 7.0 7004
Manageengine Adaudit Plus
Version 7.0 7005
Manageengine Adaudit Plus
Version 7.0 7006
Manageengine Adaudit Plus
Version 7.0 7007
Manageengine Adaudit Plus
Version 7.0 7008
Manageengine Adaudit Plus
Version 7.0 7050
Manageengine Adaudit Plus
Version 7.0 7051
Manageengine Adaudit Plus
Version 7.0 7052
Manageengine Adaudit Plus
Version 7.0 7053
Manageengine Adaudit Plus
Version 7.0 7054
Manageengine Adaudit Plus
Version 7.0 7055
Manageengine Adaudit Plus
Version 7.0 7060
Manageengine Adaudit Plus
Version 7.0 7062
Manageengine Adaudit Plus
Version 7.0 7063
Manageengine Adaudit Plus
Version 7.0 7065
Manageengine Adaudit Plus
Version 7.0 7080
Manageengine Adaudit Plus
Version 7.0 7081
Manageengine Adaudit Plus
Version 7.0 7082
Manageengine Adaudit Plus
Version 7.0 7090
Manageengine Adaudit Plus
Version 7.0 7091

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.