CVE-2023-49943

MEDIO 5.4CVE-2023-49943 · Published 18/01/2024 · updated 17/06/2026

En resumen

CVE-2023-49943 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a manageengine servicedesk plus msp (zohocorp).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.0% de las vulnerabilidades.
Solución: actualizar a 14.5 o posterior.

Package	Affected versions	Patched versions
manageengine servicedesk plus msp zohocorp	`= 14.5< 14.5`	`14.5`

Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 14.5< 14.5

14.5

Más vulnerabilidades de manageengine servicedesk plus msp

Ver todo →