CVE-2023-23075: XSS
Published Feb 1, 2023
·Updated
Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.
Affected Software
38 affected components
ZohoCorp Manageengine Assetexplorer=6.9
ZohoCorp Manageengine Assetexplorer=6.9-6900
ZohoCorp Manageengine Assetexplorer=6.9-6901
ZohoCorp Manageengine Assetexplorer=6.9-6902
ZohoCorp Manageengine Assetexplorer=6.9-6903
ZohoCorp Manageengine Assetexplorer=6.9-6904
ZohoCorp Manageengine Assetexplorer=6.9-6905
ZohoCorp Manageengine Assetexplorer=6.9-6906
ZohoCorp Manageengine Assetexplorer=6.9-6907
ZohoCorp Manageengine Assetexplorer=6.9-6908
ZohoCorp Manageengine Assetexplorer=6.9-6909
ZohoCorp Manageengine Assetexplorer=6.9-6950
ZohoCorp Manageengine Assetexplorer=6.9-6951
ZohoCorp Manageengine Assetexplorer=6.9-6952
ZohoCorp Manageengine Assetexplorer=6.9-6953
ZohoCorp Manageengine Assetexplorer=6.9-6954
ZohoCorp Manageengine Assetexplorer=6.9-6955
ZohoCorp Manageengine Assetexplorer=6.9-6956
ZohoCorp Manageengine Assetexplorer=6.9-6957
ZohoCorp Manageengine Assetexplorer=6.9-6970
ZohoCorp Manageengine Assetexplorer=6.9-6971
ZohoCorp Manageengine Assetexplorer=6.9-6972
ZohoCorp Manageengine Assetexplorer=6.9-6973
ZohoCorp Manageengine Assetexplorer=6.9-6974
ZohoCorp Manageengine Assetexplorer=6.9-6975
ZohoCorp Manageengine Assetexplorer=6.9-6976
ZohoCorp Manageengine Assetexplorer=6.9-6977
ZohoCorp Manageengine Assetexplorer=6.9-6978
ZohoCorp Manageengine Assetexplorer=6.9-6979
ZohoCorp Manageengine Assetexplorer=6.9-6980
ZohoCorp Manageengine Assetexplorer=6.9-6981
ZohoCorp Manageengine Assetexplorer=6.9-6982
ZohoCorp Manageengine Assetexplorer=6.9-6983
ZohoCorp Manageengine Assetexplorer=6.9-6984
ZohoCorp Manageengine Assetexplorer=6.9-6985
ZohoCorp Manageengine Assetexplorer=6.9-6986
ZohoCorp Manageengine Assetexplorer=6.9-6987
ZohoCorp Manageengine Assetexplorer=6.9-6988
Event History
Feb 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-23075?
The severity of CVE-2023-23075 is medium.
2
How does CVE-2023-23075 impact Zoho Asset Explorer 6.9?
CVE-2023-23075 impacts Zoho Asset Explorer 6.9 through a Cross Site Scripting (XSS) vulnerability in the credential name when creating a new Assets Workstation.
3
How can I fix CVE-2023-23075?
To fix CVE-2023-23075, it is recommended to apply the latest security patch or update provided by Zohocorp.
4
Is there a known exploit for CVE-2023-23075?
There is no information available about a known exploit for CVE-2023-23075 at the moment.
5
Where can I find more information about CVE-2023-23075?
You can find more information about CVE-2023-23075 on the Zohocorp Bug Bounty page.