Unrated severityNVD Advisory· Published Apr 26, 2023· Updated Feb 3, 2025

CVE-2023-29443

Description

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoho/ManageEngine ServiceDesk Plusdescription
Zohocorp/Manageengine Assetexplorerllm-fuzzy
Range: <6989
Zohocorp/Manageengine Supportcenter Plusllm-fuzzy
Range: <14200
Zohocorp/ManageEngine ServiceDesk Plus MSPllm-fuzzy
Range: <14105

Patches

Vulnerability mechanics

References

www.manageengine.com/products/service-desk/CVE-2023-29443.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000