PT-2023-1796 · Microsoft · Dynamics 365 Unified Service Desk

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics Unified Service Desk affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365 Unified Service Desk, which can be exploited by a remote attacker to...

Atlassian JIRA Service Desk 5.3.x < 5.3.3 / 5.4.x < 5.4.2 / 5.5.x < 5.5.1 Impersonation (JSDSERVER-12312)

The instance of Atlassian Service Desk hosted on the remote web server is 5.3 prior to 5.3.3, 5.4 prior to 5.4.2 or 5.5 prior to 5.5.1. Is is, therefore, affected by an authentication vulnerability. A remote attacker included on Jira issues or requests with other users can impersonate those users...

CVE-2023-23073

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component...

ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management and oth...

ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management modules...

ZOHO ManageEngine ServiceDesk Plus 跨站脚本漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management modules...

Cross site scripting

A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of the file themes/default/servicedesk/view.php of the component Service Desk Image URL Handler. The manipulation of the argument sslink leads to cross site scripting. It is possibl...

CVE-2022-4421 rAthena FluxCP Service Desk Image URL view.php cross site scripting

A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of the file themes/default/servicedesk/view.php of the component Service Desk Image URL Handler. The manipulation of the argument sslink leads to cross site scripting. It is possibl...

CVE-2022-4421 rAthena FluxCP Service Desk Image URL view.php cross site scripting

A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of the file themes/default/servicedesk/view.php of the component Service Desk Image URL Handler. The manipulation of the argument sslink leads to cross site scripting. It is possibl...

PT-2022-27141 · Unknown · Rathena Fluxcp

Name of the Vulnerable Software and Affected Versions: rAthena FluxCP affected versions not specified Description: A vulnerability was found in the Service Desk Image URL Handler component of rAthena FluxCP, affecting an unknown function of the file themes/default/servicedesk/view.php. The...

CVE-2022-4421 rAthena FluxCP Service Desk Image URL view.php cross site scripting

A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of the file themes/default/servicedesk/view.php of the component Service Desk Image URL Handler. The manipulation of the argument sslink leads to cross site scripting. It is possibl...

FluxCP 跨站脚本漏洞

FluxCP is rAthena open source a web-based control panel . Used for rAntha server written in PHP. A security vulnerability exists in a previous version of rAthena FluxCP, which stems from an unknown function in the file themes/default/servicedesk/view.php of the component Service Desk Image URL...

CVE-2022-4421

CVE-2022-4421 affects rAthena FluxCP, specifically the Service Desk Image URL Handler in themes/default/servicedesk/view.php. The vulnerability arises from manipulating the sslink parameter, enabling cross-site scripting. It is exploitable remotely. A patch exists (named 8a39b2b2bf28353b3503ff142...

CVE-2022-40771

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure...

CVE-2022-40770

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users...

ZOHO ManageEngine ServiceDesk Plus 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management, and...

PT-2022-25529 · Zoho · Zoho Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior Description: The issue is related to authenticated command injection, which can be exploited by high-privileged users. Recommendations: For Zoho ManageEngine ServiceDesk Plus version...

PT-2022-25531 · Zoho · Zoho Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior Description: The issue is related to a validation bypass that allows users to access sensitive data via the report module. This is due to improper input validation, which can lead to...

PT-2022-25530 · Zoho · Manageengine Servicedesk Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions 13010 and prior Description: The issue is related to an XML External Entity attack, which leads to Information Disclosure. This attack can potentially expose sensitive information. Recommendations:...

ZOHO ManageEngine ServiceDesk Plus 输入验证错误漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management IT Project Management, Procurement and Contract Management modules...