Lucene search

[email protected]CVE-2023-26601

HistoryMar 06, 2023 - 10:15 p.m.

CVE-2023-26601

2023-03-0622:15:09

CWE-400

[email protected]

web.nvd.nist.gov

cve-2023-26601

zoho

manageengine

servicedesk plus

asset explorer

servicedesk plus msp

support center plus

dos

denial-of-service

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.0%

JSON

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).

CPENameOperatorVersion
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorerlt6.9
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq1.0.34
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq5.6
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq4.0
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq6.1
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq6.5
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq6.2.0
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq-
zohocorp:manageengine_assetexplorerzohocorp manageengine assetexplorereq6.9
zohocorp:manageengine_servicedesk_pluszohocorp manageengine servicedesk pluslt14.1

CPE	Name	Operator	Version
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	lt	6.9
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	1.0.34
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	5.6
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	4.0
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	6.1
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	6.5
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	6.2.0
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	-
zohocorp:manageengine_assetexplorer	zohocorp manageengine assetexplorer	eq	6.9
zohocorp:manageengine_servicedesk_plus	zohocorp manageengine servicedesk plus	lt	14.1

Rows per page:

1-10 of 431

References

manageengine.com

www.manageengine.com/products/service-desk/CVE-2023-26601.html

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

46.0%

JSON

Related for CVE-2023-26601

prion1 nessus4 zdi1