CVE-2024-36038

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.3MEDIUM

EPSS

0.1%

top 67.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Manageengine Opmanager

Timeline

PublishedJun 24

Description

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:NExploitability: 2.1 | Impact: 4.2

Affected Packages1 packages

▶CVEListV5manageengine/opmanager128234 — 128248

🔴Vulnerability Details

CVEList

Stored XSS↗2024-06-24

▶

GHSA

GHSA-85gq-377h-5g79: Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server optio↗2024-06-24

▶