CVEDB API

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 81.7%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-37308

Zohocorp » Manageengine Adaudit Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:-
Zohocorp » Manageengine Adaudit Plus » Version: 4.1.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.1.0
Zohocorp » Manageengine Adaudit Plus » Version: 4.5.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.5.0
Zohocorp » Manageengine Adaudit Plus » Version: 5.0.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.0.0
Zohocorp » Manageengine Adaudit Plus » Version: 5.1

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1
Zohocorp » Manageengine Adaudit Plus » Version: 6.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0
Zohocorp » Manageengine Adaudit Plus » Version: 6.0.1

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0.1
Zohocorp » Manageengine Adaudit Plus » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0