Search Results (Refine Search)
- CPE Product Version: cpe:/a:zohocorp:servicedesk_plus:9.0
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2016-4890 |
ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie. Published: April 14, 2017; 2:59:00 PM -0400 |
V3.0: 5.3 MEDIUM V2.0: 5.0 MEDIUM |
CVE-2016-4888 |
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: April 14, 2017; 2:59:00 PM -0400 |
V3.0: 5.4 MEDIUM V2.0: 3.5 LOW |
CVE-2015-1479 |
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter. Published: February 04, 2015; 11:59:08 AM -0500 |
V3.x:(not available) V2.0: 6.5 MEDIUM |