CVE-2022-25373
Published Apr 5, 2022
Last updated 2 years ago
Overview
- Description
- Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.4
- Impact score
- 2.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "791D8E77-1A6B-4739-A6E6-BF91E978144E",
"versionEndExcluding": "11.0"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AE43EA7-9AA1-4EA7-8840-22BD543A093C"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11000:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D788203D-B169-4C98-B090-B070630750DF"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "846EA6AB-9588-4D9F-AEBD-83B018BE7362"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDD540F2-C964-40DE-91AB-DE726AAA82A8"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB196A6F-FBD8-4573-B1B2-BE2B06BD1AC5"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "685783DB-DD06-4D9C-9E83-63449D5B60D9"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C371F2CD-A1F8-4EC7-8096-D61DEA337D44"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B980A72F-53E2-4FC1-AA25-743AE8650641"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68289AE6-F348-401A-BE49-08889492B23B"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11008:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0667DC3-8315-4F2B-BAB7-D1F1CA476D68"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11009:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34C768E0-FF5B-413D-87B2-9D09F28F95DC"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11010:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5570C5A9-A79B-48CF-B95D-3513F7B9BAF7"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11011:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B77031F5-E097-4549-BF5E-1D0718AB52B9"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11012:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A9C0879-8AE5-4E6E-998C-E79FC418C68A"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11013:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F1F21D7-08E8-4637-903B-4277399C0BD7"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11014:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97920D1C-62BA-4B10-9912-C2ED1C1B0313"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11015:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "023C6278-1FF9-4E79-8D95-32BE71701D37"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11016:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34EFB9EF-269E-4A72-8357-2A54E8B78C84"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35366F60-D6E2-4B29-B593-D24079CE6831"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB60E016-82DD-41EC-85F9-D4F37AF1F8E3"
},
{
"criteria": "cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B83E37C-B1F6-4CEB-8A8E-39E24BE8B59C"
}
],
"operator": "OR"
}
]
}
]