CVE-2024-41150

CVE-2024-41150 : Stored XSS in the request module affects ManageEngine ServiceDesk Plus (up to 14810), ServiceDesk Plus MSP (up to 14800), and SupportCenter Plus (up to 14800). Root cause: stored XSS via the request module. SDP remediation per PTSecurity suggests upgrading to 14820; for MSP and S...

CVE-2024-41150 Stored XSS

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...

CVE-2024-38869 Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25...

CVE-2024-38869

CVE-2024-38869 (Zoho ManageEngine) is tied to an incorrect authorization weakness that enables a stored cross-site scripting (XSS) vulnerability in remote office deployment configurations. Concrete details from PT-2024-6653 indicate affected products and versions include Endpoint Central before 1...

CVE-2024-38869 Incorrect Authorization

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25...

ZOHO ManageEngine ServiceDesk Plus和ZOHO ManageEngine SupportCenter Plus 跨站脚本漏洞

ZOHO ManageEngine ServiceDesk Plus SDP and ZOHO ManageEngine SupportCenter Plus are both products of ZOHO Corporation, an ITIL-based IT service management software. ZOHO ManageEngine ServiceDesk Plus is an ITIL-based IT service management software. The software integrates Incident Management,...

ZOHO ManageEngine ServiceDesk Plus和SupportCenter Plus 安全漏洞

ZOHO ManageEngine ServiceDesk Plus SDP and ZOHO ManageEngine SupportCenter Plus are both products of ZOHO, Inc.ZOHO ManageEngine ServiceDesk Plus is a suite of ITIL architecture-based ZOHO ManageEngine ServiceDesk Plus is an ITIL-based IT service management software. The software integrates...

PT-2024-29295 · Zoho · Manageengine Supportcenter Plus +1

Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions through 14810 ManageEngine ServiceDesk Plus MSP versions through 14800 ManageEngine SupportCenter Plus versions through 14800 Description: A Stored Cross-site Scripting vulnerability in the request modul...

CVE-2024-41150: Improper Neutralization of Input During Web Page Generation

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800...

PT-2024-6653 · Zoho · Zoho Manageengine Servicedesk Plus +2

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions prior to 14.8.20 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14.8.20 Zoho ManageEngine SupportCenter Plus versions prior to 14.8.20 Zoho ManageEngine Endpoint Central versions prior to...

CVE-2024-27314

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users...

CVE-2024-27314 Stored XSS Vulnerability

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users...

CVE-2024-27314 Stored XSS Vulnerability

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users...

CVE-2024-27314: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users...

PT-2024-5294 · Zoho · Zoho Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus versions below 14730 Zoho ManageEngine ServiceDesk Plus MSP versions below 14720 Zoho ManageEngine SupportCenter Plus versions below 14720 Description: The vulnerability exists in the Custom Actions componen...

ManageEngine SupportCenter Plus < 14.7 Build 14720

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.7 Build 14720. It is, therefore, affected by a vulnerability as referenced in the support-centercve-2024-27314 advisory. - A stored cross-site scripting XSS vulnerability allowed users with the SDAdmin role...

The vulnerability of the generateSQLReport() function in software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus, as well as the ManageEngine AssetExplorer software for managing IT assets, allows attackers to exploit their privileges.

The vulnerability of the generateSQLReport function in software solutions for Zoho ManageEngine ServiceDesk Plus, Zoho ManageEngine ServiceDesk Plus MSP, and Zoho ManageEngine SupportCenter Plus, as well as the ManageEngine AssetExplorer software for IT asset management, is related to deficiencie...

ManageEngine SupportCenter Plus < 11.0 Build 11025

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 11.0 Build 11025. It is, therefore, affected by a vulnerability as referenced in the support-centercve-2022-40773 advisory. - Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before...

ManageEngine SupportCenter Plus < 11.0 Build 11022

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 11.0 Build 11022. It is, therefore, affected by a vulnerability as referenced in the support-centercve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606,...

ManageEngine SupportCenter Plus < 14.3 Build 14300

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.3 Build 14300. It is, therefore, affected by a vulnerability as referenced in the support-centerCVE-2023-34197 advisory. - Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300,...