CVE-2023-38331: Zohocorp ManageEngine SupportCenter Plus

Medium severity, CVSS 5.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products module.

Affected products

• Zohocorp ManageEngine SupportCenter Plus: version 8.0 only; version 8.1 only; version 11.0 only; version 14.0 only

Published 2023-07-28. Last modified 2026-06-17.