CVE-2020-14048

zohocorp manageengine servicedesk plus

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-14048

Katalog CVE

CVSS 7.5 · High EPSS 4,8%

Kerentanan Missing Authentication for Critical Function pada zohocorp manageengine servicedesk plus. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents.

Rincian

Terbit di NVD
12 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-306: Missing Authentication for Critical Function
EPSS (30 hari)
4,8% peluang dieksploitasi; lebih tinggi dari 91,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
zohocorp manageengine servicedesk plus Versi 8.2
zohocorp manageengine servicedesk plus Versi 8.2 8201
zohocorp manageengine servicedesk plus Versi 8.2 8202
zohocorp manageengine servicedesk plus Versi 8.2 8203
zohocorp manageengine servicedesk plus Versi 8.2 8204
zohocorp manageengine servicedesk plus Versi 8.2 8205
zohocorp manageengine servicedesk plus Versi 8.2 8206
zohocorp manageengine servicedesk plus Versi 8.2 8207
zohocorp manageengine servicedesk plus Versi 8.2 8208
zohocorp manageengine servicedesk plus Versi 8.2 8209
zohocorp manageengine servicedesk plus Versi 8.2 8210
zohocorp manageengine servicedesk plus Versi 8.2 8211
zohocorp manageengine servicedesk plus Versi 8.2 8212
zohocorp manageengine servicedesk plus Versi 8.2 8213
zohocorp manageengine servicedesk plus Versi 8.2 8214
zohocorp manageengine servicedesk plus Versi 8.2 8215
zohocorp manageengine servicedesk plus Versi 8.2 8216
zohocorp manageengine servicedesk plus Versi 8.2 8217
zohocorp manageengine servicedesk plus Versi 9.0
zohocorp manageengine servicedesk plus Versi 9.0 9000
zohocorp manageengine servicedesk plus Versi 9.0 9001
zohocorp manageengine servicedesk plus Versi 9.0 9002
zohocorp manageengine servicedesk plus Versi 9.0 9003
zohocorp manageengine servicedesk plus Versi 9.0 9004
zohocorp manageengine servicedesk plus Versi 9.0 9005
zohocorp manageengine servicedesk plus Versi 9.0 9006
zohocorp manageengine servicedesk plus Versi 9.0 9007
zohocorp manageengine servicedesk plus Versi 9.0 9008
zohocorp manageengine servicedesk plus Versi 9.0 9009
zohocorp manageengine servicedesk plus Versi 9.0 9010
zohocorp manageengine servicedesk plus Versi 9.0 9011
zohocorp manageengine servicedesk plus Versi 9.0 9012
zohocorp manageengine servicedesk plus Versi 9.0 9013
zohocorp manageengine servicedesk plus Versi 9.0 9014
zohocorp manageengine servicedesk plus Versi 9.0 9016
zohocorp manageengine servicedesk plus Versi 9.0 9017
zohocorp manageengine servicedesk plus Versi 9.0 9018
zohocorp manageengine servicedesk plus Versi 9.0 9019
zohocorp manageengine servicedesk plus Versi 9.0 9020
zohocorp manageengine servicedesk plus Versi 9.0 9021
zohocorp manageengine servicedesk plus Versi 9.0 9022
zohocorp manageengine servicedesk plus Versi 9.0 9023
zohocorp manageengine servicedesk plus Versi 9.0 9024
zohocorp manageengine servicedesk plus Versi 9.0 9025
zohocorp manageengine servicedesk plus Versi 9.0 9026
zohocorp manageengine servicedesk plus Versi 9.0 9027
zohocorp manageengine servicedesk plus Versi 9.0 9028
zohocorp manageengine servicedesk plus Versi 9.0 9029
zohocorp manageengine servicedesk plus Versi 9.0 9030
zohocorp manageengine servicedesk plus Versi 9.0 9031
zohocorp manageengine servicedesk plus Versi 9.0 9032
zohocorp manageengine servicedesk plus Versi 9.0 9033
zohocorp manageengine servicedesk plus Versi 9.0 9034
zohocorp manageengine servicedesk plus Versi 9.0 9035
zohocorp manageengine servicedesk plus Versi 9.0 9036
zohocorp manageengine servicedesk plus Versi 9.0 9037
zohocorp manageengine servicedesk plus Versi 9.0 9038
zohocorp manageengine servicedesk plus Versi 9.0 9039
zohocorp manageengine servicedesk plus Versi 9.0 9040
zohocorp manageengine servicedesk plus Versi 9.0 9041

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 269 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.