CVE-2023-37308: XSS
Published Jul 7, 2023
·Updated
Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.
Affected Software
25 affected components
ZohoCorp ManageEngine ADAudit Plus<7.0
ZohoCorp ManageEngine ADAudit Plus=7.0
ZohoCorp ManageEngine ADAudit Plus=7.0-7000
ZohoCorp ManageEngine ADAudit Plus=7.0-7002
ZohoCorp ManageEngine ADAudit Plus=7.0-7003
ZohoCorp ManageEngine ADAudit Plus=7.0-7004
ZohoCorp ManageEngine ADAudit Plus=7.0-7005
ZohoCorp ManageEngine ADAudit Plus=7.0-7006
ZohoCorp ManageEngine ADAudit Plus=7.0-7007
ZohoCorp ManageEngine ADAudit Plus=7.0-7008
ZohoCorp ManageEngine ADAudit Plus=7.0-7050
ZohoCorp ManageEngine ADAudit Plus=7.0-7051
ZohoCorp ManageEngine ADAudit Plus=7.0-7052
ZohoCorp ManageEngine ADAudit Plus=7.0-7053
ZohoCorp ManageEngine ADAudit Plus=7.0-7054
ZohoCorp ManageEngine ADAudit Plus=7.0-7055
ZohoCorp ManageEngine ADAudit Plus=7.0-7060
ZohoCorp ManageEngine ADAudit Plus=7.0-7062
ZohoCorp ManageEngine ADAudit Plus=7.0-7063
ZohoCorp ManageEngine ADAudit Plus=7.0-7065
ZohoCorp ManageEngine ADAudit Plus=7.0-7080
ZohoCorp ManageEngine ADAudit Plus=7.0-7081
ZohoCorp ManageEngine ADAudit Plus=7.0-7082
ZohoCorp ManageEngine ADAudit Plus=7.0-7090
ZohoCorp ManageEngine ADAudit Plus=7.0-7091
Event History
Jul 7, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-37308?
CVE-2023-37308 is a vulnerability in Zoho ManageEngine ADAudit Plus that allows cross-site scripting (XSS) attacks via the username field.
2
How severe is CVE-2023-37308?
CVE-2023-37308 has a severity rating of 5.4, which is considered medium.
3
How does CVE-2023-37308 affect Zoho ManageEngine ADAudit Plus?
CVE-2023-37308 affects Zoho ManageEngine ADAudit Plus versions before 7100 and allows XSS attacks through the username field.
4
What is the Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability is CVE-2023-37308.
5
Is there a fix available for CVE-2023-37308?
Yes, the fix for CVE-2023-37308 is to update Zoho ManageEngine ADAudit Plus to version 7100 or later.