CVE-2021-43294: XSS
Published Nov 30, 2021
·Updated
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module.
Affected Software
16 affected components
ZohoCorp Manageengine Supportcenter Plus=11.0
ZohoCorp Manageengine Supportcenter Plus=11.0-11001
ZohoCorp Manageengine Supportcenter Plus=11.0-11002
ZohoCorp Manageengine Supportcenter Plus=11.0-11003
ZohoCorp Manageengine Supportcenter Plus=11.0-11004
ZohoCorp Manageengine Supportcenter Plus=11.0-11005
ZohoCorp Manageengine Supportcenter Plus=11.0-11006
ZohoCorp Manageengine Supportcenter Plus=11.0-11007
ZohoCorp Manageengine Supportcenter Plus=11.0-11008
ZohoCorp Manageengine Supportcenter Plus=11.0-11009
ZohoCorp Manageengine Supportcenter Plus=11.0-11010
ZohoCorp Manageengine Supportcenter Plus=11.0-11011
ZohoCorp Manageengine Supportcenter Plus=11.0-11012
ZohoCorp Manageengine Supportcenter Plus=11.0-11013
ZohoCorp Manageengine Supportcenter Plus=11.0-11014
ZohoCorp Manageengine Supportcenter Plus=11.0-11015
Event History
Nov 30, 2021
CVE Published
via MITRE·06:38 PM
Data Sourced
via MITRE·06:38 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43294?
CVE-2021-43294 is considered to be a medium severity vulnerability due to its potential for reflected cross-site scripting attacks.
2
How do I fix CVE-2021-43294?
To fix CVE-2021-43294, upgrade Zoho ManageEngine SupportCenter Plus to version 11.0-11016 or later.
3
What type of vulnerability is CVE-2021-43294?
CVE-2021-43294 is a reflected cross-site scripting (XSS) vulnerability.
4
Which software versions are affected by CVE-2021-43294?
CVE-2021-43294 affects Zoho ManageEngine SupportCenter Plus versions prior to 11.0-11016.
5
Is user data at risk with CVE-2021-43294?
Yes, user data could be at risk due to potential XSS attacks that exploit CVE-2021-43294.