ManageEngine ServiceDesk Plus < 14.1 Build 14103

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.1 Build 14103. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23073 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO ...

ManageEngine ServiceDesk Plus MSP < 14.0 Build 14000

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.0 Build 14000. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14...

ManageEngine ServiceDesk Plus MSP < 10.6 Build 10606

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 10.6 Build 10606. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspcve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before...

ManageEngine ServiceDesk Plus < 13.0 Build 13008

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 13.0 Build 13008. It is, therefore, affected by a vulnerability as referenced in the service-deskcve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...

ManageEngine ServiceDesk Plus < 14.1 Build 14104

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.1 Build 14104. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23074 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via...

ManageEngine ServiceDesk Plus MSP < 10.6 Build 10609

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 10.6 Build 10609. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspcve-2022-40773 advisory. - Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus befo...

ManageEngine ServiceDesk Plus MSP < 13.0 Build 13002

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 13.0 Build 13002. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-23073 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14...

ManageEngine ServiceDesk Plus MSP < 14.3 Build 14300

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.3 Build 14300. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-34197 advisory. - Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before...

ManageEngine ServiceDesk Plus < 14.2 Build 14202

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.2 Build 14202. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-34197 advisory. - Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...

ManageEngine ServiceDesk Plus < 14.0 Build 14003

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.0 Build 14003. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23077 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the...

Spoofing

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange...

CVE-2023-35785

CVE-2023-35785 is a TFA bypass vulnerability affecting Zoho ManageEngine Active Directory 360, ADAudit Plus, ADManager Plus, Asset Explorer, Cloud Security Plus, Data Security Plus, Eventlog Analyzer, Exchange Reporter Plus, Log360, Log360 UEBA, M365 Manager/Security Plus, Recovery Manager Plus, ...

CVE-2023-34197

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications...

CVE-2023-34197

CVE-2023-34197 affects Zoho ManageEngine ServiceDesk Plus (versions before 14202), ServiceDesk Plus MSP (before 14300), and SupportCenter Plus (before 14300). The issue is a privilege escalation in the Release module that allows unprivileged users to access and modify the Reminders of a release t...

ZOHO ManageEngine ServiceDesk Plus 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...

PT-2023-24732 · Zoho · Zoho Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14202 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14300 Zoho ManageEngine SupportCenter Plus versions prior to 14300 Description: The issue allows unprivileged users to access...

ManageEngine ServiceDesk Plus < 14.0 Build 14004 RCE

A remote code execution vulnerability exists in ManageEngine ServiceDesk Plus prior to 14.0 Build 14004 due to use of Apache xmlsec aka XML Security for Java 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and...

CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

Design/Logic Flaw

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint...

CVE-2023-29443

Summary of CVE-2023-29443 from connected sources: Multiple ManageEngine products (ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus, AssetExplorer) are affected by an XML External Entity (XXE) vulnerability. A privileged SDAdmin can configure a malicious server to return malformed XML vi...