medium6.5
CVE-2023-26600
ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privi…
Impact
ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Assetexplorer | before 6.9 Version 6.9 |
| Zohocorp | Manageengine Servicedesk Plus | before 14.1 Version 14.1 |
| Zohocorp | Manageengine Servicedesk Plus Msp | before 13.0 Version 13.0 |
| Zohocorp | Manageengine Supportcenter Plus | before 11.0 Version 11.0 |