CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-01

Last modified

2025-03-27

Weaknesses

CWE-78

Affected products

• Manageengine Supportcenter Plus (Zohocorp)

References

• https://bugbounty.zohocorp.com/bb/#/bug/101000006459751?tab=originator
• https://www.manageengine.com/products/support-center/CVE-2023-23076.html