VendorsZoho Corpmanageengine_servicedesk_plus_msp14.0
Vulnerabilities

Zoho Corp ManageEngine ServiceDesk Plus MSP 14.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-26601
Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).
Published 2023-03-06 · Modified
7.5EPSS 0.341
CVE-2023-29443
Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.
Published 2023-04-26 · Modified
4.9EPSS 0.030