CVE-2023-26600

Published Mar 6, 2023 CVSS 3.1 · 6.5 Medium EPSS 6.3% KEV · Not listed
Description
ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-30395 ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
History
Type Values Removed Values Added
Weaknesses CWE-269
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Mar 6, 2025, 3:23 PM
Reserved
Feb 26, 2023, 12:00 AM
Status
Modified
Published
Mar 6, 2023, 8:15 PM
Modified
Jun 17, 2026, 5:43 AM