CVE-2024-41150

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.

Published: Aug 23, 2024
Updated: Aug 28, 2024
CVE: CVE-2024-41150
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.1
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_servicedesk_plus_msp	14.8-14800	14.8-14800.x
zohocorp / manageengine_servicedesk_plus	14.8-14810	14.8-14810.x
zohocorp / manageengine_servicedesk_plus	-	14.7.x
zohocorp / manageengine_servicedesk_plus_msp	-	14.7.x
zohocorp / manageengine_supportcenter_plus	14.8-14800	14.8-14800.x
zohocorp / manageengine_supportcenter_plus	-	14.7.x

https://www.manageengine.com/products/service-desk/CVE-2024-41150.html

Vulnerability Database

289,784

CVE-2024-41150