Low WID-SEC-2024-1915 1 CVE

Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Cross-Site Scripting

Published Aug 22, 2024 · Updated Aug 22, 2024 · de-DE

Vendor: Zoho Product: ManageEngine ServiceDesk Plus Platform: Windows

Summary

Ein Angreifer kann eine Schwachstelle in Zoho ManageEngine ServiceDesk Plus ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

ManageEngine ServiceDesk Plus ist eine Helpdesk- und Asset-Management-Software.

Vulnerabilities 1

Medium 6.3

CVE-2024-41150

Stored XSS

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; Suppor…

ManageEngine ServiceDesk Plus MSP ServiceDesk Plus SupportCenter Plus

Aug 23, 2024

Revision history

2024-08-22 #1
Initiale Fassung

References

ManageEngine Security Advisory CVE-2024-41150 vom 2024-08-22
https://www.manageengine.com/products/service-desk/CVE-2024-41150.html