Zoho ManageEngine ServiceDesk Plus MSP Improper Access Control Vulnerability

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. An improper access control vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. An attacker could exploit the vulnerability to access internal data...

Zoho ManageEngine ServiceDesk Plus MSP Server-Side Request Forgery Vulnerability

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...

CVE-2021-31530

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

CVE-2021-31160

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...

CVE-2021-31530

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

Information disclosure

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

Code injection

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP prior to version 10521 is affected by a Server-Side Request Forgery (SSRF) vulnerability. The issue is confirmed in multiple sources (including Red Hat and NVD records) with a CVSS v3.1 base score of 9.8 (CRITICAL) and CVSS v2 of 7.5 (HIGH). The vulnerabilit...

CVE-2021-31531

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-31530

The CVE-2021-31530 entry affects Zoho ManageEngine ServiceDesk Plus MSP prior to version 10522, exposing information disclosure via a web-based ITSM platform. The vulnerability is network-exposed with no user interaction required, and it has a CVSS v3.1 base score of 7.5 (High) and a CVSS v2.0 ba...

CVE-2021-31160

CVE-2021-31160 affects Zoho ManageEngine ServiceDesk Plus MSP before version 10521. Connected sources consistently describe an improper access control vulnerability that allows an attacker to access internal data without authentication. The NVD entry lists CVSS v3.1 base score 7.5 (NETWORK, LOW a...

CVE-2021-31160: Undefined Security Weakness

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data...

CVE-2021-31531: Server-Side Request Forgery (SSRF)

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-31530: Undefined Security Weakness

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure...

ZOHO ManageEngine ServiceDesk Plus 代码问题漏洞

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...

Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration

Exploit Title: Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration Date: 17/06/2021 Exploit Author: Ricardo Ruiz @ricardojoserf CVE: CVE-2021-31159 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31159 Vendor Homepage: https://www.manageengine.com Vendor Confirmation:...

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732...

CVE-2021-31159: Generation of Error Message Containing Sensitive Information

Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732...

CVE-2014-5301

Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4...

CVE-2014-5301

CVE-2014-5301 describes a directory traversal vulnerability affecting ManageEngine products (ServiceDesk Plus MSP v5–v9.0 v9030; AssetExplorer v4–v6.1; SupportCenter v5–v7.9; IT360 v8–v10.4). The root cause is insufficient validation during file upload, enabling traversal sequences to write arbit...