CVSS 3.1 Score 4.3 of 10 (medium)


Published Aug 4, 2023
Updated: Aug 10, 2023
CWE ID 346


CVE-2023-29505 is a vulnerability discovered in Zoho ManageEngine Network Configuration Manager version 12.6.165. The issue lies in the WebSocket endpoint, which allows for Cross-site WebSocket hijacking. This vulnerability has a base severity of MEDIUM and a base score of 4.3 according to the CVSS v3.1 scoring system. The affected product is Zoho ManageEngine Network Configuration Manager version 12.6.165. The exploitability score is 2.8, and user interaction is required for exploitation. The potential danger this vulnerability poses to an organization includes low confidentiality impact, no integrity impact, and no availability impact according to the CVSS v3.1 rating analysis provided by It is recommended that organizations using Zoho ManageEngine Network Configuration Manager version 12.6.165 take appropriate measures to remediate this vulnerability to prevent any potential security breaches or unauthorized access through Cross-site WebSocket hijacking.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-29505 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options