6.5

CVE-2023-26600

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update -
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6900
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6901
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6902
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6903
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6904
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6905
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6906
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6907
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6908
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6909
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6950
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6951
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6952
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6953
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6954
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6955
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6956
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6957
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6970
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6971
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6972
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6973
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6974
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6975
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6976
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6977
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6978
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6979
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6980
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6981
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6982
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6983
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6984
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6985
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6986
Zohocorp ≫ Manageengine Assetexplorer Version 6.9 Update 6987
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.1 Update -
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.1 Update 14100
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.1 Update 14101
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.1 Update 14102
Zohocorp ≫ Manageengine Servicedesk Plus Version 14.1 Update 14103
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update -
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13000
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13001
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13002
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13003
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version 13.0 Update 13004
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update -
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11000
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11001
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11002
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11003
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11004
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11005
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11006
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11007
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11008
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11009
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11010
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11011
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11012
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11013
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11014
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11015
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11016
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11017
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11018
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11019
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11020
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11021
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11022
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11024
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11025
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11026
Zohocorp ≫ Manageengine Supportcenter Plus Version 11.0 Update 11027
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.31% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://manageengine.com
Product
https://www.manageengine.com/products/service-desk/CVE-2023-26600.html
Vendor Advisory