Read the docs
TI-2023-18938 Aliases CVE-2023-37308GHSA-rjw7-9q4c-p65j

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

Priority LOW 28CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01875 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*before 7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:-:*:*:*:*:*:*7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*7.0 7000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*7.0 7002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*7.0 7003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*7.0 7004VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*7.0 7005VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:*7.0 7006VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:*7.0 7007VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:*7.0 7008VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:* Versions before 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:-:*:*:*:*:*:* Versions 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:* Versions 7.0 7000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:* Versions 7.0 7002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:* Versions 7.0 7003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:* Versions 7.0 7004 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:* Versions 7.0 7005 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:* Versions 7.0 7006 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:* Versions 7.0 7007 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:* Versions 7.0 7008 Vulnerable ·Zohocorp
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:*7.0 7050VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:*7.0 7051VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:*7.0 7052VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:*7.0 7053VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:*7.0 7054VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:*7.0 7055VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:*7.0 7060VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:*7.0 7062VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:*7.0 7063VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:*7.0 7065VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:*7.0 7080VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7081:*:*:*:*:*:*7.0 7081VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7082:*:*:*:*:*:*7.0 7082VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7090:*:*:*:*:*:*7.0 7090VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7091:*:*:*:*:*:*7.0 7091VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:* Versions 7.0 7050 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:* Versions 7.0 7051 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:* Versions 7.0 7052 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:* Versions 7.0 7053 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:* Versions 7.0 7054 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:* Versions 7.0 7055 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:* Versions 7.0 7060 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:* Versions 7.0 7062 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:* Versions 7.0 7063 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:* Versions 7.0 7065 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:* Versions 7.0 7080 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7081:*:*:*:*:*:* Versions 7.0 7081 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7082:*:*:*:*:*:* Versions 7.0 7082 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7090:*:*:*:*:*:* Versions 7.0 7090 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7091:*:*:*:*:*:* Versions 7.0 7091 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-37308
  2. 2026-10-03 Alias added: GHSA-rjw7-9q4c-p65j

References

Advisory 1

  • TI-2022-23765 Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003… KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-11005 Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated… CVSS 3.1CRITICAL 9.8
  • TI-2020-09251 Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to… CVSS 3.1CRITICAL 9.8
  • TI-2021-19006 Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files. CVSS 3.1CRITICAL 9.8
  • TI-2023-16036 The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker… CVSS 3.1HIGH 7.5
  • TI-2025-24864 SQL injection in ManageEngine ADAudit Plus CVSS 3.1HIGH 8.3
See all 51 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences