CVE-2023-28341

6.1 mediumEPSS 99%

Medium (6.1) in zohocorp manageengine applications manager. EPSS 99% chance of exploitation in the next 30 days.

Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 99% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_applications_manager

References

https://manageengine.com
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28341.html
https://manageengine.com
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28341.html

Check your stack JSON