CVE-2016-4889

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
zohocorpservicedesk_plus
𝑥
≤ 8.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN89726415/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html
http://www.securityfocus.com/bid/93215
https://www.manageengine.com/products/service-desk/readme-9.0.html
http://jvn.jp/en/jp/JVN89726415/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html
http://www.securityfocus.com/bid/93215
https://www.manageengine.com/products/service-desk/readme-9.0.html