7.5

CVE-2023-26601

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).

Data is provided by the National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update-
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6900
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6901
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6902
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6903
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6904
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6905
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6906
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6907
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6908
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6909
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6950
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6951
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6952
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6953
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6954
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6955
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6956
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6957
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6970
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6971
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6972
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6973
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6974
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6975
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6976
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6977
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6978
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6979
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6980
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6981
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6982
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6983
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6984
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6985
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6986
Zohocorp ≫ Manageengine Assetexplorer Version6.9 Update6987
Zohocorp ≫ Manageengine Servicedesk Plus Version14.1 Update-
Zohocorp ≫ Manageengine Servicedesk Plus Version14.1 Update14100
Zohocorp ≫ Manageengine Servicedesk Plus Version14.1 Update14101
Zohocorp ≫ Manageengine Servicedesk Plus Version14.1 Update14102
Zohocorp ≫ Manageengine Servicedesk Plus Version14.1 Update14103
Zohocorp ≫ Manageengine Servicedesk Plus Msp Version14.0 Update14000
Zohocorp ≫ Manageengine Supportcenter Plus Version14.0 Update14000
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.52% 0.887
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.