CVE-2024-50053 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-50053

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.

Published: Mar 21, 2025
Updated: May 4, 2025
CVE: CVE-2024-50053
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.4
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_servicedesk_plus	14.9-14910	14.9-14910.x
zohocorp / manageengine_servicedesk_plus_msp	-	14.9
zohocorp / manageengine_servicedesk_plus_msp	14.9-14900	14.9-14900.x
zohocorp / manageengine_supportcentre_plus	-	14.9
zohocorp / manageengine_supportcentre_plus	14.9-14900	14.9-14900.x
zohocorp / manageengine_servicedesk_plus	-	14.9
zohocorp / manageengine_servicedesk_plus	14.9	14.9.x

https://www.manageengine.com/products/service-desk/CVE-2024-50053.html