Servicedesk Plus@* Security Vulnerabilities and Issues — Servicedesk Plus@* CVE List

Lucene search

ManageengineServicedesk Plus*

4 matches found

CVE•added 2015/02/04 4:59 p.m.•41 views

CVE-2015-1480

ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTab...

4CVSS6AI score0.1823EPSS

CVE•added 2011/09/20 10:55 a.m.•40 views

CVE-2011-1509

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

5CVSS6.1AI score0.00192EPSS

CVE•added 2011/09/20 10:55 a.m.•39 views

CVE-2011-1510

Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.

4.3CVSS5.7AI score0.00329EPSS

CVE•added 2011/07/17 8:55 p.m.•37 views

CVE-2011-2757

Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.

5CVSS6.8AI score0.02167EPSS