CVE-2023-28341

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious…

Medium · published April 11, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 6.1. It sits in the 99.9th percentile for exploit probability.

CVSS v3.1

6.1

EPSS

99%

Percentile

99.9

In the wild

Unconfirmed

What it is

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page.

The record

Technical detail

CVSS v3.1: 6.1 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.98701 · 99.9th percentile
Published: 2023-04-11T00:00Z

EPSS history

Timeline

11 APR 00:00Z
Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious…
cvelistv5