Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus 14.0 14000 - page 2

Version: 14.0 14000
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus:*:*:*:*:*:*:*:*
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine ServiceDesk Plus version 14.0 14000 Zoho ManageEngine ServiceDesk Plus 14.0 14000 is affected by 25 vulnerabilities: 8 medium, 17 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71514 - Resource exhaustion
CVE-2023-26601
CWE-400 Medium
No
No
14.1 14104 25.01.2023 SB2023012510
SB2023022032
#VU71513 - Improper Access Control
CWE-284 Low
No
No
14.1 14104 25.01.2023 SB2023012510
#VU70489 - Improper Access Control
CWE-284 Medium
No
No
14.1 14103 27.12.2022 SB2022122704
#VU70488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
14.1 14103 27.12.2022 SB2022122704
#VU69580 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-40771
CWE-611 Low
No
No
14.0 14001 24.11.2022 SB2022112419
SB2022112420
SB2022112421


Showing elements 21 - 40 out of 25