Description
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ManageEngine | ServiceDesk Plus | ≤ 14910 | — |
| ManageEngine | ServiceDesk Plus MSP | ≤ 14900 | — |
| ManageEngine | SupportCentre Plus | ≤ 14900 | — |
Advisories 1
- WID-SEC-2024-3699 Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Dec 12, 2024