CVE:CVE-2023-23075
CNNVD:CNNVD-202302-111
ZOHO ManageEngine AssetExplorer是美国卓豪（ZOHO）公司的一套资产管理软件。该软件提供资产跟踪、IT资产的扫描和资产所有权的跟踪等功能。
ZOHO ManageEngine AssetExplorer 6.9版本存在安全漏洞，该漏洞源于通过凭据名称发现包含跨站点脚本（XSS）漏洞。
solution:Upgrade zohocorp manageengine_assetexplorer to a higher version than 6.9,6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976,6.9:6977,6.9:6978,6.9:6979,6.9:6980,6.9:6981,6.9:6982,6.9:6983,6.9:6984,6.9:6985,6.9:6986,6.9:6987,6.9:6988,and avoid the version 6.9,6.9:6900,6.9:6901,6.9:6902,6.9:6903,6.9:6904,6.9:6905,6.9:6906,6.9:6907,6.9:6908,6.9:6909,6.9:6950,6.9:6951,6.9:6952,6.9:6953,6.9:6954,6.9:6955,6.9:6956,6.9:6957,6.9:6970,6.9:6971,6.9:6972,6.9:6973,6.9:6974,6.9:6975,6.9:6976,6.9:6977,6.9:6978,6.9:6979,6.9:6980,6.9:6981,6.9:6982,6.9:6983,6.9:6984,6.9:6985,6.9:6986,6.9:6987,6.9:6988