CVE-2023-29505
published 2023-08-04CVE-2023-29505: An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
PriorityP342high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.89%
55.0th percentile
An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| zohocorp | manageengine_network_configuration_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-29505https://excellium-services.com/cert-xlm-advisory/CVE-2023-29505https://www.manageengine.com/itom/advisory/cve-2023-29505.htmlhttps://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_127131https://excellium-services.com/cert-xlm-advisory/CVE-2023-29505https://www.manageengine.com/itom/advisory/cve-2023-29505.htmlhttps://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_127131
2023-08-04
Published