Servicedesk Plus (Zohocorp) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-04-24. Vendor: Zohocorp.

CVEs of Servicedesk Plus

• CVE-2019-10008 - CVSS 8.8 (high), 2019-04-24: Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an…
• CVE-2016-4889 - CVSS 8.8 (high), 2017-04-14: ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to…
• CVE-2016-4888 - CVSS 5.4 (medium), 2017-04-14: Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2016-4890 - CVSS 5.3 (medium), 2017-04-14: ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password…
• CVE-2015-1479 - CVSS 6.5 (medium), 2015-02-04: SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated…