CVE-2019-12252

In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the…

published May 21, 2019

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail&notifyTo=SOLFORWARD&id= substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08208 · 94.9th percentile
Published
2019-05-21T17:24Z
EPSS history
Timeline
  • 21 MAY 17:24Z
    In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the…
    cvelistv5