Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

概要

参考情報

• securityfocus.com/bid/107129 · Third Party Advisory
• exploit-db.com/exploits/46413 · Exploit
• manageengine.com/products/service-desk/readme.html · Release Notes
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2019-8394

manageengine servicedesk plus のその他の脆弱性

• CVE-2024-50053中 5.4Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerabl…
• CVE-2024-41150中 6.1An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and Supp…
• CVE-2024-38869中 5.4Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue a…
• CVE-2024-27314低 2.4Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable …
• CVE-2023-6105中 5.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-pri…