CVE-2023-37308

MediumCVSS 5.4

Published: 07/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.62%

73th percentile - higher than 73% of all known CVEs

Zoho ManageEngine ADAudit Plus before version 7100 allows XSS via the username field.

An attacker could exploit this vulnerability to inject malicious code, potentially leading to data theft or session hijacking.

It is recommended to upgrade to version 7100 or later to mitigate this vulnerability.

Original NVD description (English source)

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.