CVE-2023-38331

Published: Jul 28, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

Products: Zohocorp: Manageengine Supportcenter Plus

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11000
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11024
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11026
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11027
Zohocorp Manageengine Supportcenter Plus	Version 14.0 14000
Zohocorp Manageengine Supportcenter Plus	Version 14.0 14001
Zohocorp Manageengine Supportcenter Plus	Version 8.0 8015
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8100
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8101
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8102
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8117
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8118
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8119
Zohocorp Manageengine Supportcenter Plus	Version 8.1 8121