CVE:CVE-2022-25373
CNNVD:CNNVD-202204-2013
Zoho ManageEngine SupportCenter Plus是印度Zoho公司的一种基于 Web 的客户支持软件。用于让组织有效地管理客户请求、他们的帐户和联系信息、服务合同，并在此过程中提供卓越的客户体验。
Zoho ManageEngine SupportCenter Plus 11020 之前版本存在安全漏洞，攻击者可以在请求历史记录中进行存储跨站脚本攻击。
solution:Upgrade zohocorp manageengine_supportcenter_plus to a higher version than 11.0,11.0,11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.0:11011,11.0:11012,11.0:11013,11.0:11014,11.0:11015,11.0:11016,11.0:11017,11.0:11018,11.0:11019,and avoid the version (,11.0),11.0,11.0:11000,11.0:11001,11.0:11002,11.0:11003,11.0:11004,11.0:11005,11.0:11006,11.0:11007,11.0:11008,11.0:11009,11.0:11010,11.0:11011,11.0:11012,11.0:11013,11.0:11014,11.0:11015,11.0:11016,11.0:11017,11.0:11018,11.0:11019