6.3Orta
CVE-2024-50053Stored XSS
Açıklama
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ManageEngine | ServiceDesk Plus | ≤ 14910 | |
| ManageEngine | ServiceDesk Plus MSP | ≤ 14900 | |
| ManageEngine | SupportCentre Plus | ≤ 14900 | |
| zohocorp | manageengine servicedesk plus | < 14.9 | |
| zohocorp | manageengine servicedesk plus msp | < 14.9 | |
| zohocorp | manageengine supportcentre plus | < 14.9 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (7)
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.9:*:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.9:14910:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14900:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_supportcentre_plus:*:*:*:*:*:*:*:*< 14.9cpe:2.3:a:zohocorp:manageengine_supportcentre_plus:14.9:14900:*:*:*:*:*:*