Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus MSP 14303 - page 2

Vendor: Zoho Corporation
Software: Zoho ManageEngine ServiceDesk Plus MSP
Version: 14303
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine ServiceDesk Plus MSP version 14303 Zoho ManageEngine ServiceDesk Plus MSP 14303 is affected by 32 vulnerabilities: 7 medium, 25 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79446 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Low
No
No
 14305 11.08.2023 SB2023081125
#VU79445 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 14305 11.08.2023 SB2023081125
#VU79438 - Cleartext Storage of Sensitive Information
 CWE-312 Low
No
No
 14305 11.08.2023 SB2023081125
#VU78659 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78658 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78657 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78656 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78655 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78654 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78653 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78652 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 14304 25.07.2023 SB2023072556


Showing elements 21 - 40 out of 32