Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus - page 2

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus:*:*:*:*:*:*:*:*
Total vulnerabilities: 42
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoho ManageEngine ServiceDesk Plus Zoho ManageEngine ServiceDesk Plus is affected by 42 known vulnerabilities: 1 critical, 2 high, 14 medium, 25 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71514 - Resource exhaustion
CVE-2023-26601
CWE-400 Medium
No
No
14.1 14104 25.01.2023 SB2023012510
SB2023022032
#VU71513 - Improper Access Control
CWE-284 Low
No
No
14.1 14104 25.01.2023 SB2023012510
#VU71210 - Improper input validation
CVE-2022-47966
CWE-20 High
Available
Exploited
14.0 14004 17.01.2023 SB2023011717
SB2023011718
#VU70489 - Improper Access Control
CWE-284 Medium
No
No
14.1 14103 27.12.2022 SB2022122704
#VU70488 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
14.1 14103 27.12.2022 SB2022122704
#VU69580 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-40771
CWE-611 Low
No
No
14.0 14001 24.11.2022 SB2022112419
SB2022112420
SB2022112421
#VU69556 - Command injection
CVE-2022-40770
CWE-77 Low
No
No
13.0 13011 24.11.2022 SB2022112404
SB2022112405
SB2022112406
#VU64192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-46065
CWE-79 Low
No
No
12.0 12000 13.06.2022 SB2022012773
#VU58502 - Improper Authentication
CVE-2021-44077
CWE-287 Critical
Available
Exploited
10.0 10530, 11.0 11016 03.12.2021 SB2021120304
#VU54097 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-20081
CWE-94 Low
No
No
11.2 11205 14.06.2021 SB2021061406
#VU52018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20080
CWE-79 Low
No
No
11.2 11200 09.04.2021 SB2021040907
#VU28137 - Improper Access Control
CWE-284 Low
No
No
11.1 build 11115 20.05.2020 SB2020052028
#VU28136 - Cryptographic Issues
CWE-310 Medium
No
No
11.1 build 11115 20.05.2020 SB2020052028
#VU28135 - Improper Authentication
CWE-287 High
No
No
11.1 build 11114 20.05.2020 SB2020052027
#VU28134 - Cryptographic Issues
CWE-310 Medium
No
No
11.1 build 11113 20.05.2020 SB2020052026
#VU28133 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
11.1 build 11113 20.05.2020 SB2020052026
#VU28132 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
11.1 build 11113 20.05.2020 SB2020052026
#VU28011 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
11.1 build 11112 19.05.2020 SB2020051914
#VU28010 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
11.1 build 11112 19.05.2020 SB2020051914
#VU28009 - Exposure of sensitive information to an unauthorized actor
CVE-2020-13154
CWE-200 Medium
No
No
11.1 build 11112 19.05.2020 SB2020051914


Showing elements 21 - 40 out of 42