CVE-2024-27314
27.05.2024, 07:15
Zoho ManageEngineServiceDesk Plus versions below14730,ServiceDesk Plus MSP below 14720 andSupportCenter Plus below14720 are vulnerable tostored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users.
| Vendor | Product | Version |
|---|---|---|
| zohocorp | manageengine_servicedesk_plus | 𝑥 ≤ 14.6 |
| zohocorp | manageengine_servicedesk_plus | 14.7:14700 |
| zohocorp | manageengine_servicedesk_plus | 14.7:14710 |
| zohocorp | manageengine_servicedesk_plus | 14.7:14720 |
| zohocorp | manageengine_servicedesk_plus_msp | 𝑥 ≤ 14.6 |
| zohocorp | manageengine_servicedesk_plus_msp | 14.7:14700 |
| zohocorp | manageengine_servicedesk_plus_msp | 14.7:14710 |
| zohocorp | manageengine_supportcenter_plus | 𝑥 ≤ 14.6 |
| zohocorp | manageengine_supportcenter_plus | 14.7:14700 |
| zohocorp | manageengine_supportcenter_plus | 14.7:14710 |
𝑥
= Vulnerable software versions