// For flags

CVE-2022-25373

 

Severity Score

5.4
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.

Zoho ManageEngine SupportCenter Plus versiones anteriores a 11020, permite el almacenamiento de tipo XSS en el historial de peticiones

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
Medium
Authentication
Single
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-02-20 CVE Reserved
  • 2022-04-05 CVE Published
  • 2023-10-27 EPSS Updated
  • 2024-08-03 CVE Updated
  • 2024-08-03 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
< 11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version " < 11.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11000
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11003
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11004
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11005
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11006
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11007
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11008
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11009
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11010
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11011
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11012
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11013
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11014
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11015
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11016
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11017
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11018
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11019
Affected