CVE-2022-25373: XSS
Published Apr 5, 2022
·Updated
Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.
Affected Software
22 affected components
ZohoCorp Manageengine Supportcenter Plus<11.0
ZohoCorp Manageengine Supportcenter Plus=11.0
ZohoCorp Manageengine Supportcenter Plus=11.0-11000
ZohoCorp Manageengine Supportcenter Plus=11.0-11001
ZohoCorp Manageengine Supportcenter Plus=11.0-11002
ZohoCorp Manageengine Supportcenter Plus=11.0-11003
ZohoCorp Manageengine Supportcenter Plus=11.0-11004
ZohoCorp Manageengine Supportcenter Plus=11.0-11005
ZohoCorp Manageengine Supportcenter Plus=11.0-11006
ZohoCorp Manageengine Supportcenter Plus=11.0-11007
ZohoCorp Manageengine Supportcenter Plus=11.0-11008
ZohoCorp Manageengine Supportcenter Plus=11.0-11009
ZohoCorp Manageengine Supportcenter Plus=11.0-11010
ZohoCorp Manageengine Supportcenter Plus=11.0-11011
ZohoCorp Manageengine Supportcenter Plus=11.0-11012
ZohoCorp Manageengine Supportcenter Plus=11.0-11013
ZohoCorp Manageengine Supportcenter Plus=11.0-11014
ZohoCorp Manageengine Supportcenter Plus=11.0-11015
ZohoCorp Manageengine Supportcenter Plus=11.0-11016
ZohoCorp Manageengine Supportcenter Plus=11.0-11017
ZohoCorp Manageengine Supportcenter Plus=11.0-11018
ZohoCorp Manageengine Supportcenter Plus=11.0-11019
Event History
Apr 5, 2022
CVE Published
via MITRE·06:30 PM
Data Sourced
via MITRE·06:30 PM
Description
Frequently Asked Questions
1
What is CVE-2022-25373?
CVE-2022-25373 is a vulnerability in Zoho ManageEngine SupportCenter Plus that allows for stored cross-site scripting (XSS) attacks in the request history.
2
How severe is CVE-2022-25373?
CVE-2022-25373 has a severity rating of 5.4, which is considered medium.
3
What software is affected by CVE-2022-25373?
Zoho ManageEngine SupportCenter Plus versions up to 11.0 build 11019 are affected by CVE-2022-25373.
4
How can I fix CVE-2022-25373?
To fix CVE-2022-25373, it is recommended to upgrade Zoho ManageEngine SupportCenter Plus to version 11.0 build 11020 or later.
5
Are there any references for CVE-2022-25373?
Yes, you can find references for CVE-2022-25373 at the following links: [1] [2] [3]