CVE-2022-25373: Zohocorp ManageEngine SupportCenter Plus

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.

Affected products

• Zohocorp ManageEngine SupportCenter Plus: before 11.0 (fixed in 11.0); version 11.0 only

Published 2022-04-05. Last modified 2026-06-17.