Known vulnerabilities in ManageEngine Applications Manager 16.3 16310

Version: 16.3 16310
Software CPE: cpe:2.3:a:zohocorp:manageengine_applications_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ManageEngine Applications Manager version 16.3 16310 ManageEngine Applications Manager 16.3 16310 is affected by 4 vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76614 - Improper Access Control
CWE-284 Low
No
No
16.5 16500 30.05.2023 SB2023053010
#VU75196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29442
CWE-79 Medium
No
No
16.4 16400 18.04.2023 SB2023041820
#VU72044 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28341
CWE-79 Medium
No
No
16.3 16350 08.02.2023 SB2023020831
#VU72043 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-28340
CWE-611 Medium
No
No
16.3 16330 08.02.2023 SB2023020830