ManageEngine SupportCenter Plus < 14.0 Build 14000

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.0 Build 14000. It is, therefore, affected by a vulnerability as referenced in the support-centerCVE-2023-23076 advisory. - OS Command injection vulnerability in Support Center Plus 11 via Executor in Action...

CVE-2023-23076

creationtimestamp| type| source ---|---|--- 2023-02-01 22:14:16+00:00| seen| https://t.me/cibsecurity/57344 2025-03-27 14:27:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9090...

CVE-2023-23076

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules...

CVE-2023-23076

CVE-2023-23076 affects ManageEngine SupportCenter Plus 11, where an OS command injection via the Executor in Action when creating new schedules allows unauthenticated or network-based exploitation (cvss3.1: 9.8). For affected versions, multiple sources indicate remediation through upgrading to Su...