CVE-2016-4889

ALTO 8.8CVE-2016-4889 · Published 14/04/2017 · updated 17/06/2026

En resumen

CVE-2016-4889 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a servicedesk plus (zohocorp).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 85.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
servicedesk plus zohocorp	`≤ 8.2`	No fix yet

Description

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions.

References

jvn.jp/en/jp/JVN89726415/index.html · Third Party Advisory
jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html · Third Party Advisory
securityfocus.com/bid/93215 · Third Party Advisory
manageengine.com/products/service-desk/readme-9.0.html

Más vulnerabilidades de servicedesk plus

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

servicedesk plus

zohocorp

≤ 8.2

No fix yet

Más vulnerabilidades de servicedesk plus

Ver todo →