CVE-2016-4889

概要

参考情報

• jvn.jp/en/jp/JVN89726415/index.html · Third Party Advisory
• jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html · Third Party Advisory
• securityfocus.com/bid/93215 · Third Party Advisory
• manageengine.com/products/service-desk/readme-9.0.html

servicedesk plus のその他の脆弱性

• CVE-2019-10008高 8.8Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically co…
• CVE-2016-4890中 5.3ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain …
• CVE-2016-4888中 5.4Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web sc…
• CVE-2015-1479中 6.5SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote…