| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine assetexplorer | = 6.9< 6.9 | 6.9 |
| manageengine servicedesk plus | = 14.0< 14.0 | 14.0 |
| manageengine servicedesk plus msp | = 10.6< 10.6 | 10.6 |
| manageengine supportcenter plus | = 11.0< 11.0 | 11.0 |
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free