← All advisories

Medium severity4.3NVD Advisory· Published Aug 4, 2023· Updated Jun 17, 2026

CVE-2023-29505

CVE-2023-29505

Description

An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Manageengine/Network Configuration Managerllm-create
Range: <12.6.165
Zoho/ManageEngine Network Configuration Managerllm-fuzzy2 versions
<12.6.165+ 1 more
- (no CPE)range: <12.6.165
- (no CPE)
Zohocorp/Manageengine Network Configuration Manager
cpe:2.3:a:zohocorp:manageengine_network_configuration_manager:12.6:build126165:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

excellium-services.com/cert-xlm-advisory/CVE-2023-29505nvdThird Party Advisory
www.manageengine.com/network-monitoring/help/read-me-complete.htmlnvdRelease Notes
cds.thalesgroup.com/en/tcs-cert/CVE-2023-29505nvd
www.manageengine.com/itom/advisory/cve-2023-29505.htmlnvd

News mentions

0

No linked articles in our index yet.