Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2023-49943
HistoryJan 18, 2024 - 7:15 p.m.

CVE-2023-49943

2024-01-1819:15:09
CWE-79
mitre
web.nvd.nist.gov
23
cve-2023-49943
zoho manageengine
servicedesk plus msp
stored xss
security vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.1

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON

Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task’s name in a time sheet.

Affected configurations

Nvd
Node
zohocorpmanageengine_servicedesk_plus_mspRange<14.5
OR
zohocorpmanageengine_servicedesk_plus_mspMatch14.514500
OR
zohocorpmanageengine_servicedesk_plus_mspMatch14.514501
OR
zohocorpmanageengine_servicedesk_plus_mspMatch14.514502
OR
zohocorpmanageengine_servicedesk_plus_mspMatch14.514503
VendorProductVersionCPE
zohocorpmanageengine_servicedesk_plus_msp*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp14.5cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.5:14500:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp14.5cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.5:14501:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp14.5cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.5:14502:*:*:*:*:*:*
zohocorpmanageengine_servicedesk_plus_msp14.5cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.5:14503:*:*:*:*:*:*

Related

nessus 1
nvd 1
prion 1
cvelist 1
nessus
nessus
ManageEngine ServiceDesk Plus MSP < 14.5 Build 14504 XSS
2024-01-25 00:00:00
nvd
nvd
CVE-2023-49943
2024-01-18 19:15:09
prion
prion
Design/Logic Flaw
2024-01-18 19:15:00
cvelist
cvelist
CVE-2023-49943
2024-01-18 00:00:00

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.1

Confidence

High

EPSS

0.01

Percentile

83.8%

JSON
Related for CVE-2023-49943
nessus1nvd1prion1cvelist1