← Volver a CVEs
CVE-2023-23078
MEDIUM6.1
Descripcion
Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets.
Detalles CVE
Puntuacion CVSS v3.16.1
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado2/1/2023
Ultima modificacion3/27/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
zohocorp:manageengine_servicedesk_plus
Debilidades (CWE)
CWE-79CWE-79
Referencias
https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator(af854a3a-2127-422b-91ae-364da2661108)
https://www.manageengine.com/products/service-desk/CVE-2023-23078.html(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.