CVE-2015-1480

ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData…

published February 4, 2015

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet or a direct request to (2) swf/flashreport.swf, (3) reports/flash/details.jsp, or (4) reports/CreateReportTable.jsp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06261 · 93.5th percentile
Published
2015-02-04T16:00Z
EPSS history
Timeline
  • 04 FEB 16:00Z
    ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData…
    cvelistv5