CVE-2023-23075

Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
zohocorpmanageengine_assetexplorer
6.9
zohocorpmanageengine_assetexplorer
6.9:6900
zohocorpmanageengine_assetexplorer
6.9:6901
zohocorpmanageengine_assetexplorer
6.9:6902
zohocorpmanageengine_assetexplorer
6.9:6903
zohocorpmanageengine_assetexplorer
6.9:6904
zohocorpmanageengine_assetexplorer
6.9:6905
zohocorpmanageengine_assetexplorer
6.9:6906
zohocorpmanageengine_assetexplorer
6.9:6907
zohocorpmanageengine_assetexplorer
6.9:6908
zohocorpmanageengine_assetexplorer
6.9:6909
zohocorpmanageengine_assetexplorer
6.9:6950
zohocorpmanageengine_assetexplorer
6.9:6951
zohocorpmanageengine_assetexplorer
6.9:6952
zohocorpmanageengine_assetexplorer
6.9:6953
zohocorpmanageengine_assetexplorer
6.9:6954
zohocorpmanageengine_assetexplorer
6.9:6955
zohocorpmanageengine_assetexplorer
6.9:6956
zohocorpmanageengine_assetexplorer
6.9:6957
zohocorpmanageengine_assetexplorer
6.9:6970
zohocorpmanageengine_assetexplorer
6.9:6971
zohocorpmanageengine_assetexplorer
6.9:6972
zohocorpmanageengine_assetexplorer
6.9:6973
zohocorpmanageengine_assetexplorer
6.9:6974
zohocorpmanageengine_assetexplorer
6.9:6975
zohocorpmanageengine_assetexplorer
6.9:6976
zohocorpmanageengine_assetexplorer
6.9:6977
zohocorpmanageengine_assetexplorer
6.9:6978
zohocorpmanageengine_assetexplorer
6.9:6979
zohocorpmanageengine_assetexplorer
6.9:6980
zohocorpmanageengine_assetexplorer
6.9:6981
zohocorpmanageengine_assetexplorer
6.9:6982
zohocorpmanageengine_assetexplorer
6.9:6983
zohocorpmanageengine_assetexplorer
6.9:6984
zohocorpmanageengine_assetexplorer
6.9:6985
zohocorpmanageengine_assetexplorer
6.9:6986
zohocorpmanageengine_assetexplorer
6.9:6987
zohocorpmanageengine_assetexplorer
6.9:6988
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator
https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator