Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-41150

Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ManageEngine

Description

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ManageEngine ServiceDesk Plus

Default version status: unaffected

  • 0 to ≤ 14810affected

ManageEngine ServiceDesk Plus MSP

Default version status: unaffected

  • 0 to ≤ 14800affected

ManageEngine SupportCenter Plus

Default version status: unaffected

  • 0 to ≤ 14800affected

References