Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-38333 Details

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CNA: CISA-ADPCVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-38333.html	CVE	Vendor Advisory
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-38333.html	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CISA-ADP

Product	Versions
zohocorp manageengine applications manager	< 16.5 16.5 - 16.5 build16500 16.5 build16510 16.5 build16511
CPE cpe:2.3:a:zohocorp:manageengine_applications_manager:::::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:-:::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16500:::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16510:::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16511:::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16520:::::: cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16530:::::: Remediation No remediation found in references.

Product

Versions

zohocorp manageengine applications manager

< 16.5

16.5 -

16.5 build16500

16.5 build16510

16.5 build16511

cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:-:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16500:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16510:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16511:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16520:*:*:*:*:*:*
cpe:2.3:a:zohocorp:manageengine_applications_manager:16.5:build16530:*:*:*:*:*:*

6 change records found show changes

QUICK INFO