WID-SEC-W-2023-1058

DeutschShown in its original language — a full translation is planned for a future version.

Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht XML External Entity Angriff

view advisory published 2023-04-20

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Zoho ManageEngine ServiceDesk Plus ausnutzen, um Informationen offenzulegen oder einen Denial of Service Angriff durchzuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-29443US	medium4.9	3.03% (87th)	—	2023-04-26
Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduc…

references

External citations — patches, advisories, analysis.

WID-SEC-W-2023-1058 - CSAF Versionself
WID-SEC-2023-1058 - Portal Versionself
ManageEngine Security Advisory vom 2023-04-20external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan