CVE-2023-38333

MediumCVSS 6.1

Published: 10/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.98%

78th percentile - higher than 78% of all known CVEs

Summary

Zoho ManageEngine Applications Manager through version 16530 allows reflected XSS while logged in.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious scripts in the user's browser context, potentially leading to data theft or session hijacking.

Recommendation

It is recommended to upgrade to the latest version of Zoho ManageEngine Applications Manager to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.