CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28800

When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.7%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2023-28800

Zscaler » Client Connector » Version: Any

cpe:2.3:a:zscaler:client_connector:*
Zscaler » Client Connector » Version: N/A

cpe:2.3:a:zscaler:client_connector:-
Zscaler » Client Connector » Version: 1.10.1

cpe:2.3:a:zscaler:client_connector:1.10.1
Zscaler » Client Connector » Version: 1.3

cpe:2.3:a:zscaler:client_connector:1.3
Zscaler » Client Connector » Version: 1.3.0.31

cpe:2.3:a:zscaler:client_connector:1.3.0.31
Zscaler » Client Connector » Version: 1.3.1

cpe:2.3:a:zscaler:client_connector:1.3.1
Zscaler » Client Connector » Version: 1.3.1.6

cpe:2.3:a:zscaler:client_connector:1.3.1.6
Zscaler » Client Connector » Version: 1.9

cpe:2.3:a:zscaler:client_connector:1.9
Zscaler » Client Connector » Version: 2.1

cpe:2.3:a:zscaler:client_connector:2.1
Zscaler » Client Connector » Version: 2.1.2

cpe:2.3:a:zscaler:client_connector:2.1.2
Zscaler » Client Connector » Version: 2.1.2.105

cpe:2.3:a:zscaler:client_connector:2.1.2.105
Zscaler » Client Connector » Version: 2.1.2.112

cpe:2.3:a:zscaler:client_connector:2.1.2.112
Zscaler » Client Connector » Version: 2.1.2.113

cpe:2.3:a:zscaler:client_connector:2.1.2.113
Zscaler » Client Connector » Version: 2.1.2.81

cpe:2.3:a:zscaler:client_connector:2.1.2.81
Zscaler » Client Connector » Version: 3.1

cpe:2.3:a:zscaler:client_connector:3.1
Zscaler » Client Connector » Version: 3.1.0

cpe:2.3:a:zscaler:client_connector:3.1.0
Zscaler » Client Connector » Version: 3.1.0.111

cpe:2.3:a:zscaler:client_connector:3.1.0.111
Zscaler » Client Connector » Version: 3.1.0.117

cpe:2.3:a:zscaler:client_connector:3.1.0.117
Zscaler » Client Connector » Version: 3.1.0.129

cpe:2.3:a:zscaler:client_connector:3.1.0.129
Zscaler » Client Connector » Version: 3.2

cpe:2.3:a:zscaler:client_connector:3.2
Zscaler » Client Connector » Version: 3.2.0.87

cpe:2.3:a:zscaler:client_connector:3.2.0.87
Zscaler » Client Connector » Version: 3.2.1.1

cpe:2.3:a:zscaler:client_connector:3.2.1.1
Zscaler » Client Connector » Version: 3.4

cpe:2.3:a:zscaler:client_connector:3.4
Zscaler » Client Connector » Version: 3.4.0.124

cpe:2.3:a:zscaler:client_connector:3.4.0.124
Zscaler » Client Connector » Version: 3.4.1.4

cpe:2.3:a:zscaler:client_connector:3.4.1.4
Zscaler » Client Connector » Version: 3.5

cpe:2.3:a:zscaler:client_connector:3.5
Zscaler » Client Connector » Version: 3.5.0.108

cpe:2.3:a:zscaler:client_connector:3.5.0.108
Zscaler » Client Connector » Version: 3.6

cpe:2.3:a:zscaler:client_connector:3.6
Zscaler » Client Connector » Version: 3.6.1

cpe:2.3:a:zscaler:client_connector:3.6.1
Zscaler » Client Connector » Version: 3.6.1.20

cpe:2.3:a:zscaler:client_connector:3.6.1.20
Zscaler » Client Connector » Version: 3.6.1.23

cpe:2.3:a:zscaler:client_connector:3.6.1.23
Zscaler » Client Connector » Version: 3.6.1.26

cpe:2.3:a:zscaler:client_connector:3.6.1.26
Zscaler » Client Connector » Version: 3.7

cpe:2.3:a:zscaler:client_connector:3.7
Zscaler » Client Connector » Version: 3.7.0.182

cpe:2.3:a:zscaler:client_connector:3.7.0.182
Zscaler » Client Connector » Version: 3.7.0.183

cpe:2.3:a:zscaler:client_connector:3.7.0.183
Zscaler » Client Connector » Version: 3.7.1.42

cpe:2.3:a:zscaler:client_connector:3.7.1.42
Zscaler » Client Connector » Version: 3.7.1.48

cpe:2.3:a:zscaler:client_connector:3.7.1.48
Zscaler » Client Connector » Version: 3.7.1.49

cpe:2.3:a:zscaler:client_connector:3.7.1.49

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28800

Products

Pricing

Contact Us