Hms

#9301of 60,593
34.5Total CVSS
Vulnerabilities · 5
Medium
4
Critical
1
PT-2023-18832
2023-02-01
6.1
CVE-2023-23073
Zoho
Zoho Manageengine Servicedesk Plus
The issue is a cross site scripting (XSS) vulnerability. It affects the purchase component via PO.
PT-2023-18833
2023-02-01
6.1
CVE-2023-23074
Zoho
Zoho Manageengine Servicedesk Plus
The issue is related to a cross site scripting (XSS) vulnerability. This vulnerability can be exploited via embedding videos in the language component.
PT-2023-18835
2023-02-01
9.8
CVE-2023-23076
Unknown
Supportcenter Plus
The issue is an OS Command injection vulnerability in Support Center Plus via Executor in Action when creating new schedules.
PT-2023-18836
2023-02-01
6.1
CVE-2023-23078
Zoho
Zoho Manageengine Servicedesk Plus
The issue is related to a cross site scripting (XSS) vulnerability. It occurs via the comment field when changing the credentials in the Assets.
PT-2023-6775
2023-02-01
6.4
CVE-2023-23077
Zoho
Zoho Manageengine Servicedesk Plus
The issue is related to a cross site scripting (XSS) vulnerability. This vulnerability exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct an XSS attack. The vulnerability can be exploited via the comment field when adding a new status comment.