CVE-2023-37308

{"id": "CVE-2023-37308", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2023-07-07T13:15:09.337", "references": [{"url": "https://www.manageengine.com/products/active-directory-audit/cve-2023-37308.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field."}], "lastModified": "2023-07-12T20:43:30.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFA4EA7A-B1C1-4750-A11D-89054B77B320", "versionEndExcluding": "7.0"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1290A682-CF27-4411-977B-9F4C935EF0DB"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16BADE82-3652-4074-BDFF-828B7213CAF6"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01E9CAE9-4B45-4E7A-BE78-6E7E9A3A04E8"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFA4FC59-CC4F-4F21-9AE9-3F526C91411C"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26A6F6D1-540C-43C5-96A7-0E36F3E0A4D7"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97EA9324-9377-46E1-A0EA-637128E65DED"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA5BE36E-A73A-4D1C-8185-9692373F1444"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10F48951-44A1-42C1-AE2A-B2CDFFCAFDBF"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F505C783-09DE-4045-9DB4-DD850B449A48"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "212BF664-02DE-457F-91A6-6F824ECC963B"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D102B74F-6762-4EFE-BAF7-A7D416867D9D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEDF5C01-41D8-45C0-8F0D-3A7FCB6DADEE"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D6ACBF5-25C6-403A-BCFA-66A90A8B4E14"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF50DCAC-33E1-4FE2-BF3C-C6A17CC8E48A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B2F6EE4-F3DC-43CE-B7FD-C9522A35406A"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "623151CB-4C6B-4068-B173-FE8E73D652F5"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D84377E-CB44-4C6A-A665-763A1CD1AF34"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "603D1875-BD5E-4C6C-9D2C-3CAA9D7B3AE0"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C568190-1C1B-44FA-B50A-C142A0B8224D"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F876B2E2-C2FF-47BE-9F53-5F86606A08CA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7081:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D101D29F-FF03-437A-9BBE-16CFE7A570BA"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7082:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D2D0131-7454-45E4-8312-D6041BA2A6D3"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7090:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F09D0587-A189-4250-B5A0-3F874CE58CE1"}, {"criteria": "cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7091:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35621269-F3BF-4650-B56B-57DE81902A97"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}