Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus MSP 14300 - page 2

Version: 14300
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine ServiceDesk Plus MSP version 14300 Zoho ManageEngine ServiceDesk Plus MSP 14300 is affected by 33 vulnerabilities: 8 medium, 25 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79446 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
14305 11.08.2023 SB2023081125
#VU79445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
14305 11.08.2023 SB2023081125
#VU79438 - Cleartext Storage of Sensitive Information
CWE-312 Low
No
No
14305 11.08.2023 SB2023081125
#VU78659 - Improper Access Control
CWE-284 Low
No
No
14304 25.07.2023 SB2023072556
#VU78658 - Improper Access Control
CWE-284 Medium
No
No
14304 25.07.2023 SB2023072556
#VU78657 - Improper Access Control
CWE-284 Low
No
No
14304 25.07.2023 SB2023072556
#VU78656 - Improper Access Control
CWE-284 Low
No
No
14304 25.07.2023 SB2023072556
#VU78655 - Improper Access Control
CWE-284 Low
No
No
14304 25.07.2023 SB2023072556
#VU78654 - Improper Access Control
CWE-284 Low
No
No
14304 25.07.2023 SB2023072556
#VU78653 - Improper Access Control
CWE-284 Medium
No
No
14304 25.07.2023 SB2023072556
#VU78652 - Improper Access Control
CWE-284 Medium
No
No
14304 25.07.2023 SB2023072556
#VU78651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
14304 25.07.2023 SB2023072556
#VU77579 - Security Features
CVE-2023-35785
CWE-254 Medium
No
No
14301 21.06.2023 SB2023062103
SB2023062104
SB2023062105
and 4 more


Showing elements 21 - 40 out of 33