6.3Media
CVE-2024-50053Stored XSS
Descripción
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ManageEngine | ServiceDesk Plus | ≤ 14910 | |
| ManageEngine | ServiceDesk Plus MSP | ≤ 14900 | |
| ManageEngine | SupportCentre Plus | ≤ 14900 | |
| zohocorp | manageengine servicedesk plus | < 14.9 | |
| zohocorp | manageengine servicedesk plus msp | < 14.9 | |
| zohocorp | manageengine supportcentre plus | < 14.9 |
Referencias y parches
Coincidencias CPE (NVD) (7)
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.9:*:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.9:14910:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14900:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_supportcentre_plus:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_supportcentre_plus:14.9:14900:*:*:*:*:*:*