Description
An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ManageEngine | ServiceDesk Plus | ≤ 14810 | — |
| ManageEngine | ServiceDesk Plus MSP | ≤ 14800 | — |
| ManageEngine | SupportCenter Plus | ≤ 14800 | — |
Advisories 1
- WID-SEC-2024-1915 Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Aug 22, 2024