ManageEngine SharePoint Manager Plus güvenlik açıkları (CVE)

ManageEngine SharePoint Manager Plus için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

7.9Yüksek

CVE-2026-119682 16 gün önce

Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus

ManageEngine SharePoint Manager Plus

An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass authorization checks to read and modify MFA configuration set…

8.5Yüksek

CVE-2026-119680 16 gün önce

Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature

ManageEngine SharePoint Manager Plus

A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to…