CVE-2023-29443

n/a / n/a PUBLISHED

Description (CNA)

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.manageengine.com/products/service-desk/CVE-2023-29443.html

ADP enrichment

CVE

No English description supplied.

https://www.manageengine.com/products/service-desk/CVE-2023-29443.html

CISA-ADP

No English description supplied.

No references supplied.