CVE-2024-36038

MEDIUM

Stored XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-36038 has a selected CVSS score of 6.3 (medium).

Description

Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 24, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

OpManager

Browse ManageEngine / OpManager

Default status: unaffected

CVE List128234 to < 128248affected

References

2