ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Manageengine_assetexplorer | Zohocorp | * | 6.9 (excluding) |
| Manageengine_assetexplorer | Zohocorp | 6.9 (including) | 6.9 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6900 (including) | 6.9-6900 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6901 (including) | 6.9-6901 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6902 (including) | 6.9-6902 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6903 (including) | 6.9-6903 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6904 (including) | 6.9-6904 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6905 (including) | 6.9-6905 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6906 (including) | 6.9-6906 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6907 (including) | 6.9-6907 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6908 (including) | 6.9-6908 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6909 (including) | 6.9-6909 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6950 (including) | 6.9-6950 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6951 (including) | 6.9-6951 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6952 (including) | 6.9-6952 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6953 (including) | 6.9-6953 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6954 (including) | 6.9-6954 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6955 (including) | 6.9-6955 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6956 (including) | 6.9-6956 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6957 (including) | 6.9-6957 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6970 (including) | 6.9-6970 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6971 (including) | 6.9-6971 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6972 (including) | 6.9-6972 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6973 (including) | 6.9-6973 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6974 (including) | 6.9-6974 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6975 (including) | 6.9-6975 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6976 (including) | 6.9-6976 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6977 (including) | 6.9-6977 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6978 (including) | 6.9-6978 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6979 (including) | 6.9-6979 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6980 (including) | 6.9-6980 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6981 (including) | 6.9-6981 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6982 (including) | 6.9-6982 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6983 (including) | 6.9-6983 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6984 (including) | 6.9-6984 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6985 (including) | 6.9-6985 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6986 (including) | 6.9-6986 (including) |
| Manageengine_assetexplorer | Zohocorp | 6.9-6987 (including) | 6.9-6987 (including) |
| Manageengine_servicedesk_plus | Zohocorp | * | 14.1 (excluding) |
| Manageengine_servicedesk_plus | Zohocorp | 14.1 (including) | 14.1 (including) |
| Manageengine_servicedesk_plus | Zohocorp | 14.1-14100 (including) | 14.1-14100 (including) |
| Manageengine_servicedesk_plus | Zohocorp | 14.1-14101 (including) | 14.1-14101 (including) |
| Manageengine_servicedesk_plus | Zohocorp | 14.1-14102 (including) | 14.1-14102 (including) |
| Manageengine_servicedesk_plus | Zohocorp | 14.1-14103 (including) | 14.1-14103 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | * | 13.0 (excluding) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0 (including) | 13.0 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0-13000 (including) | 13.0-13000 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0-13001 (including) | 13.0-13001 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0-13002 (including) | 13.0-13002 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0-13003 (including) | 13.0-13003 (including) |
| Manageengine_servicedesk_plus_msp | Zohocorp | 13.0-13004 (including) | 13.0-13004 (including) |
| Manageengine_supportcenter_plus | Zohocorp | * | 11.0 (excluding) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0 (including) | 11.0 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11000 (including) | 11.0-11000 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11001 (including) | 11.0-11001 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11002 (including) | 11.0-11002 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11003 (including) | 11.0-11003 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11004 (including) | 11.0-11004 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11005 (including) | 11.0-11005 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11006 (including) | 11.0-11006 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11007 (including) | 11.0-11007 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11008 (including) | 11.0-11008 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11009 (including) | 11.0-11009 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11010 (including) | 11.0-11010 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11011 (including) | 11.0-11011 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11012 (including) | 11.0-11012 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11013 (including) | 11.0-11013 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11014 (including) | 11.0-11014 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11015 (including) | 11.0-11015 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11016 (including) | 11.0-11016 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11017 (including) | 11.0-11017 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11018 (including) | 11.0-11018 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11019 (including) | 11.0-11019 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11020 (including) | 11.0-11020 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11021 (including) | 11.0-11021 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11022 (including) | 11.0-11022 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11024 (including) | 11.0-11024 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11025 (including) | 11.0-11025 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11026 (including) | 11.0-11026 (including) |
| Manageengine_supportcenter_plus | Zohocorp | 11.0-11027 (including) | 11.0-11027 (including) |