Zoho ManageEngine ITOM Proxy Server Cross-Site Scripting Vulnerability

CVE-2024-36038

What is CVE-2024-36038?

Zoho ManageEngine ITOM products from version 128234 to 128248 are susceptible to a stored cross-site scripting vulnerability in the proxy server option. This vulnerability allows attackers to inject malicious scripts that are stored on the server and executed in the context of users accessing the affected ITOM services. Exploitation of this vulnerability may lead to unauthorized access, data manipulation, and a potential compromise of user credentials, thus posing significant security risks to organizations utilizing these products.

References