← All advisories

Medium severity6.1NVD Advisory· Published Feb 1, 2023· Updated Jun 17, 2026

CVE-2023-23074

CVE-2023-23074

Description

Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

Zohocorp/Manageengine Servicedesk Plus8 versions
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:-:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14004:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14005:*:*:*:*:*:*
- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14006:*:*:*:*:*:*
Zoho/ManageEngine ServiceDesk Plusdescription
Zoho/ManageEngine Service Plusllm-fuzzy

Patches

Vulnerability mechanics

References

2

bugbounty.zohocorp.com/bb/nvdNot ApplicableVendor Advisory
www.manageengine.com/products/service-desk/CVE-2023-23074.htmlnvd

News mentions

0

No linked articles in our index yet.