Known vulnerabilities in Zoho ManageEngine ServiceDesk Plus MSP - page 3

Vendor: Zoho Corporation

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 51

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (51)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU72420 - Cleartext Transmission of Sensitive Information	CWE-319	Medium	No	No	14001	20.02.2023	SB2023022032 SB2023022104
#VU72419 - Improper Authentication	CWE-287	Medium	No	No	14001	20.02.2023	SB2023022032 SB2023022104
#VU72418 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	14001	20.02.2023	SB2023022032
#VU72417 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	14001	20.02.2023	SB2023022032
#VU72412 - Permissions, Privileges, and Access Controls	CWE-264	Low	No	No	14001	20.02.2023	SB2023022032
#VU71502 - Improper Authentication CVE-2023-22964	CWE-287	High	No	No	10611, 13004	25.01.2023	SB2023012507
#VU71170 - Improper Authentication	CWE-287	High	No	No	13004	13.01.2023	SB2023011327
#VU69880 - Permissions, Privileges, and Access Controls CVE-2022-40773	CWE-264	Medium	No	No	10609	05.12.2022	SB2022120535
#VU69872 - Permissions, Privileges, and Access Controls CVE-2022-40772	CWE-264	Medium	No	No	10609	05.12.2022	SB2022120535
#VU69580 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2022-40771	CWE-611	Low	No	No	13001	24.11.2022	SB2022112419 SB2022112420 SB2022112421
#VU69556 - Command injection CVE-2022-40770	CWE-77	Low	No	No	13000	24.11.2022	SB2022112404 SB2022112405 SB2022112406

Showing elements 41 - 60 out of 51