Medium · 6.1 CVE-2023-23078 EUVD-2023-27178GHSA-5rfp-9wcc-x567

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in th…

Published Feb 1, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets.

Advisories 1

WID-SEC-2023-0254 Zoho ManageEngine ServiceDesk Plus: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Feb 1, 2023

References