Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus MSP - page 2

Vendor: Zoho Corporation
Software: Zoho ManageEngine ServiceDesk Plus MSP
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 51
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Zoho ManageEngine ServiceDesk Plus MSP Zoho ManageEngine ServiceDesk Plus MSP is affected by 51 known vulnerabilities: 2 high, 14 medium, 35 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 14305 11.08.2023 SB2023081125
#VU79398 - Improper Access Control
 CWE-284 Low
No
No
 14305 11.08.2023 SB2023081125
#VU79397 - Improper Authentication
 CWE-287 Medium
No
No
 14305 11.08.2023 SB2023081125
#VU79396 - Server-Side Request Forgery (SSRF)
 CWE-918 Medium
No
No
 14305 11.08.2023 SB2023081125
#VU78659 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78658 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78657 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78656 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78655 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78654 - Improper Access Control
 CWE-284 Low
No
No
 14304 25.07.2023 SB2023072556
#VU78653 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78652 - Improper Access Control
 CWE-284 Medium
No
No
 14304 25.07.2023 SB2023072556
#VU78651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 14304 25.07.2023 SB2023072556
#VU77579 - Security Features
CVE-2023-35785		 CWE-254 Medium
No
No
 14301 21.06.2023 SB2023062103
SB2023062104
SB2023062105
and 4 more
#VU77328 - Improper Access Control
 CWE-284 Low
No
No
 14300 15.06.2023 SB2023061501
#VU77327 - Improper Access Control
 CWE-284 Low
No
No
 14300 15.06.2023 SB2023061501
#VU77326 - Improper Access Control
 CWE-284 Low
No
No
 14300 15.06.2023 SB2023061501
#VU74790 - Permissions, Privileges, and Access Controls
 CWE-264 Low
No
No
 14200 11.04.2023 SB2023041104
#VU74789 - Authorization Bypass Through User-Controlled Key
 CWE-639 Low
No
No
 14200 11.04.2023 SB2023041104
#VU71514 - Resource exhaustion
CVE-2023-26601		 CWE-400 Medium
No
No
 14001 25.01.2023 SB2023012510
SB2023022032


Showing elements 21 - 40 out of 51