CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-29443

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.6%

CVSS Severity

CVSS v3 Score 4.9

References

Products affected by CVE-2023-29443

Zohocorp » Manageengine Assetexplorer » Version: 6.9

cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9
Zohocorp » Manageengine Servicedesk Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:-
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.0.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0
Zohocorp » Manageengine Servicedesk Plus » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5
Zohocorp » Manageengine Servicedesk Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0
Zohocorp » Manageengine Servicedesk Plus » Version: 11.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1
Zohocorp » Manageengine Servicedesk Plus » Version: 11.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2
Zohocorp » Manageengine Servicedesk Plus » Version: 11.3

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.3
Zohocorp » Manageengine Servicedesk Plus » Version: 12.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:12.0
Zohocorp » Manageengine Servicedesk Plus » Version: 13.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:13.0
Zohocorp » Manageengine Servicedesk Plus » Version: 14.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0
Zohocorp » Manageengine Servicedesk Plus » Version: 14.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.1
Zohocorp » Manageengine Servicedesk Plus » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.1
Zohocorp » Manageengine Servicedesk Plus » Version: 8.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0
Zohocorp » Manageengine Servicedesk Plus » Version: 9.1

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1
Zohocorp » Manageengine Servicedesk Plus » Version: 9.2

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2
Zohocorp » Manageengine Servicedesk Plus » Version: 9.3

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3
Zohocorp » Manageengine Servicedesk Plus » Version: 9.4

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4
Zohocorp » Manageengine Servicedesk Plus Msp » Version: N/A

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:-
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 10.5

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.5
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 10.6

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.6
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 13.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0
Zohocorp » Manageengine Servicedesk Plus Msp » Version: 14.0

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.0
Zohocorp » Manageengine Supportcenter Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:-
Zohocorp » Manageengine Supportcenter Plus » Version: 11.0

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0
Zohocorp » Manageengine Supportcenter Plus » Version: 14.0

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.0
Zohocorp » Manageengine Supportcenter Plus » Version: 7.9

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:7.9
Zohocorp » Manageengine Supportcenter Plus » Version: 7.90

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:7.90
Zohocorp » Manageengine Supportcenter Plus » Version: 8.0

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:8.0
Zohocorp » Manageengine Supportcenter Plus » Version: 8.1

cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-29443

Products

Pricing

Contact Us