cveboard RSS feed

CVE-2024-27314

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Stored XSS Vulnerability

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus

Vendor
ManageEngine
Product
ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus
Platforms
Unknown
Default status
unaffected
ServiceDesk Plus, ServiceDesk Plus MSP, SupportCenter Plus · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affected1473014730UnavailableNone listed