cbcvebase.
CVE-2023-26601
published 2023-03-06

CVE-2023-26601: Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow…

PriorityP350high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
34.06%
98.2th percentile
Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).

Affected

8 ranges
VendorProductVersion rangeFixed in
zohocorpmanageengine_assetexplorer< 6.96.9
zohocorpmanageengine_assetexplorer
zohocorpmanageengine_servicedesk_plus< 14.114.1
zohocorpmanageengine_servicedesk_plus
zohocorpmanageengine_servicedesk_plus_msp< 14.014.0
zohocorpmanageengine_servicedesk_plus_msp
zohocorpmanageengine_supportcenter_plus< 14.014.0
zohocorpmanageengine_supportcenter_plus
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.