Read the docs
TI-2024-10048 Aliases CVE-2024-10839GHSA-4r2r-hjrw-mpq6

XML external entity in ManageEngine SharePoint Manager Plus

Priority MEDIUM 41CWE-611Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02385 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ManageEngineSharePoint Manager Plusup to 4503—No fix listedCNA
  • SharePoint Manager Plus VendorManageEngine Affected up to 4503 Fixed in — No fix listed CNA

CPE configurations NVD · 90

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4000:*:*:*:*:*:*4.0 4000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4001:*:*:*:*:*:*4.0 4001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4002:*:*:*:*:*:*4.0 4002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4003:*:*:*:*:*:*4.0 4003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4004:*:*:*:*:*:*4.0 4004VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4005:*:*:*:*:*:*4.0 4005VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4006:*:*:*:*:*:*4.0 4006VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4007:*:*:*:*:*:*4.0 4007VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4008:*:*:*:*:*:*4.0 4008VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4009:*:*:*:*:*:*4.0 4009VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4000:*:*:*:*:*:* Versions 4.0 4000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4001:*:*:*:*:*:* Versions 4.0 4001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4002:*:*:*:*:*:* Versions 4.0 4002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4003:*:*:*:*:*:* Versions 4.0 4003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4004:*:*:*:*:*:* Versions 4.0 4004 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4005:*:*:*:*:*:* Versions 4.0 4005 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4006:*:*:*:*:*:* Versions 4.0 4006 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4007:*:*:*:*:*:* Versions 4.0 4007 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4008:*:*:*:*:*:* Versions 4.0 4008 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4009:*:*:*:*:*:* Versions 4.0 4009 Vulnerable ·Zohocorp
Show 80 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4010:*:*:*:*:*:*4.0 4010VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4011:*:*:*:*:*:*4.0 4011VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4012:*:*:*:*:*:*4.0 4012VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4013:*:*:*:*:*:*4.0 4013VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4014:*:*:*:*:*:*4.0 4014VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4015:*:*:*:*:*:*4.0 4015VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4016:*:*:*:*:*:*4.0 4016VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4017:*:*:*:*:*:*4.0 4017VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4018:*:*:*:*:*:*4.0 4018VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4019:*:*:*:*:*:*4.0 4019VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4020:*:*:*:*:*:*4.0 4020VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4021:*:*:*:*:*:*4.0 4021VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4022:*:*:*:*:*:*4.0 4022VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4023:*:*:*:*:*:*4.0 4023VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4024:*:*:*:*:*:*4.0 4024VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4025:*:*:*:*:*:*4.0 4025VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4026:*:*:*:*:*:*4.0 4026VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4027:*:*:*:*:*:*4.0 4027VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4028:*:*:*:*:*:*4.0 4028VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4029:*:*:*:*:*:*4.0 4029VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4030:*:*:*:*:*:*4.0 4030VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4031:*:*:*:*:*:*4.0 4031VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4032:*:*:*:*:*:*4.0 4032VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4033:*:*:*:*:*:*4.0 4033VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4100:*:*:*:*:*:*4.1 4100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4101:*:*:*:*:*:*4.1 4101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4102:*:*:*:*:*:*4.1 4102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4103:*:*:*:*:*:*4.1 4103VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4104:*:*:*:*:*:*4.1 4104VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4105:*:*:*:*:*:*4.1 4105VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4106:*:*:*:*:*:*4.1 4106VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4107:*:*:*:*:*:*4.1 4107VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4108:*:*:*:*:*:*4.1 4108VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4109:*:*:*:*:*:*4.1 4109VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4110:*:*:*:*:*:*4.1 4110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.2:4200:*:*:*:*:*:*4.2 4200VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.2:4201:*:*:*:*:*:*4.2 4201VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4300:*:*:*:*:*:*4.3 4300VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4301:*:*:*:*:*:*4.3 4301VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4302:*:*:*:*:*:*4.3 4302VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4303:*:*:*:*:*:*4.3 4303VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4304:*:*:*:*:*:*4.3 4304VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4305:*:*:*:*:*:*4.3 4305VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4306:*:*:*:*:*:*4.3 4306VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4307:*:*:*:*:*:*4.3 4307VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4308:*:*:*:*:*:*4.3 4308VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4309:*:*:*:*:*:*4.3 4309VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4310:*:*:*:*:*:*4.3 4310VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4311:*:*:*:*:*:*4.3 4311VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4312:*:*:*:*:*:*4.3 4312VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4313:*:*:*:*:*:*4.3 4313VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4314:*:*:*:*:*:*4.3 4314VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4315:*:*:*:*:*:*4.3 4315VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4316:*:*:*:*:*:*4.3 4316VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4317:*:*:*:*:*:*4.3 4317VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4318:*:*:*:*:*:*4.3 4318VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4319:*:*:*:*:*:*4.3 4319VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4320:*:*:*:*:*:*4.3 4320VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4321:*:*:*:*:*:*4.3 4321VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4322:*:*:*:*:*:*4.3 4322VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4323:*:*:*:*:*:*4.3 4323VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4324:*:*:*:*:*:*4.3 4324VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4325:*:*:*:*:*:*4.3 4325VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4326:*:*:*:*:*:*4.3 4326VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4327:*:*:*:*:*:*4.3 4327VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4328:*:*:*:*:*:*4.3 4328VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4329:*:*:*:*:*:*4.3 4329VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4330:*:*:*:*:*:*4.3 4330VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4331:*:*:*:*:*:*4.3 4331VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4332:*:*:*:*:*:*4.3 4332VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4333:*:*:*:*:*:*4.3 4333VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4400:*:*:*:*:*:*4.4 4400VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4401:*:*:*:*:*:*4.4 4401VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4402:*:*:*:*:*:*4.4 4402VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4403:*:*:*:*:*:*4.4 4403VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4404:*:*:*:*:*:*4.4 4404VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4500:*:*:*:*:*:*4.5 4500VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4501:*:*:*:*:*:*4.5 4501VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4502:*:*:*:*:*:*4.5 4502VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4503:*:*:*:*:*:*4.5 4503VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4010:*:*:*:*:*:* Versions 4.0 4010 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4011:*:*:*:*:*:* Versions 4.0 4011 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4012:*:*:*:*:*:* Versions 4.0 4012 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4013:*:*:*:*:*:* Versions 4.0 4013 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4014:*:*:*:*:*:* Versions 4.0 4014 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4015:*:*:*:*:*:* Versions 4.0 4015 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4016:*:*:*:*:*:* Versions 4.0 4016 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4017:*:*:*:*:*:* Versions 4.0 4017 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4018:*:*:*:*:*:* Versions 4.0 4018 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4019:*:*:*:*:*:* Versions 4.0 4019 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4020:*:*:*:*:*:* Versions 4.0 4020 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4021:*:*:*:*:*:* Versions 4.0 4021 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4022:*:*:*:*:*:* Versions 4.0 4022 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4023:*:*:*:*:*:* Versions 4.0 4023 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4024:*:*:*:*:*:* Versions 4.0 4024 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4025:*:*:*:*:*:* Versions 4.0 4025 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4026:*:*:*:*:*:* Versions 4.0 4026 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4027:*:*:*:*:*:* Versions 4.0 4027 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4028:*:*:*:*:*:* Versions 4.0 4028 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4029:*:*:*:*:*:* Versions 4.0 4029 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4030:*:*:*:*:*:* Versions 4.0 4030 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4031:*:*:*:*:*:* Versions 4.0 4031 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4032:*:*:*:*:*:* Versions 4.0 4032 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.0:4033:*:*:*:*:*:* Versions 4.0 4033 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4100:*:*:*:*:*:* Versions 4.1 4100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4101:*:*:*:*:*:* Versions 4.1 4101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4102:*:*:*:*:*:* Versions 4.1 4102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4103:*:*:*:*:*:* Versions 4.1 4103 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4104:*:*:*:*:*:* Versions 4.1 4104 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4105:*:*:*:*:*:* Versions 4.1 4105 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4106:*:*:*:*:*:* Versions 4.1 4106 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4107:*:*:*:*:*:* Versions 4.1 4107 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4108:*:*:*:*:*:* Versions 4.1 4108 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4109:*:*:*:*:*:* Versions 4.1 4109 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.1:4110:*:*:*:*:*:* Versions 4.1 4110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.2:4200:*:*:*:*:*:* Versions 4.2 4200 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.2:4201:*:*:*:*:*:* Versions 4.2 4201 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4300:*:*:*:*:*:* Versions 4.3 4300 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4301:*:*:*:*:*:* Versions 4.3 4301 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4302:*:*:*:*:*:* Versions 4.3 4302 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4303:*:*:*:*:*:* Versions 4.3 4303 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4304:*:*:*:*:*:* Versions 4.3 4304 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4305:*:*:*:*:*:* Versions 4.3 4305 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4306:*:*:*:*:*:* Versions 4.3 4306 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4307:*:*:*:*:*:* Versions 4.3 4307 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4308:*:*:*:*:*:* Versions 4.3 4308 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4309:*:*:*:*:*:* Versions 4.3 4309 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4310:*:*:*:*:*:* Versions 4.3 4310 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4311:*:*:*:*:*:* Versions 4.3 4311 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4312:*:*:*:*:*:* Versions 4.3 4312 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4313:*:*:*:*:*:* Versions 4.3 4313 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4314:*:*:*:*:*:* Versions 4.3 4314 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4315:*:*:*:*:*:* Versions 4.3 4315 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4316:*:*:*:*:*:* Versions 4.3 4316 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4317:*:*:*:*:*:* Versions 4.3 4317 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4318:*:*:*:*:*:* Versions 4.3 4318 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4319:*:*:*:*:*:* Versions 4.3 4319 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4320:*:*:*:*:*:* Versions 4.3 4320 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4321:*:*:*:*:*:* Versions 4.3 4321 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4322:*:*:*:*:*:* Versions 4.3 4322 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4323:*:*:*:*:*:* Versions 4.3 4323 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4324:*:*:*:*:*:* Versions 4.3 4324 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4325:*:*:*:*:*:* Versions 4.3 4325 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4326:*:*:*:*:*:* Versions 4.3 4326 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4327:*:*:*:*:*:* Versions 4.3 4327 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4328:*:*:*:*:*:* Versions 4.3 4328 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4329:*:*:*:*:*:* Versions 4.3 4329 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4330:*:*:*:*:*:* Versions 4.3 4330 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4331:*:*:*:*:*:* Versions 4.3 4331 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4332:*:*:*:*:*:* Versions 4.3 4332 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.3:4333:*:*:*:*:*:* Versions 4.3 4333 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4400:*:*:*:*:*:* Versions 4.4 4400 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4401:*:*:*:*:*:* Versions 4.4 4401 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4402:*:*:*:*:*:* Versions 4.4 4402 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4403:*:*:*:*:*:* Versions 4.4 4403 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.4:4404:*:*:*:*:*:* Versions 4.4 4404 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4500:*:*:*:*:*:* Versions 4.5 4500 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4501:*:*:*:*:*:* Versions 4.5 4501 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4502:*:*:*:*:*:* Versions 4.5 4502 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_sharepoint_manager_plus:4.5:4503:*:*:*:*:*:* Versions 4.5 4503 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-10839
  2. 2026-10-03 Alias added: GHSA-4r2r-hjrw-mpq6

References

Advisory 1

  • TI-2015-06796 The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows… CVSS 3.0CRITICAL 9.8
  • TI-2014-04325 Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer… CVSS 3.0HIGH 8.8
  • TI-2017-08514 Path traversal in Zoho ManageEngine ServiceDesk CVSS 3.0HIGH 7.5
  • TI-2023-25530 Path traversal in ManageEngine OpManager CVSS 3.1CRITICAL 9.1
  • TI-2025-03383 SQL injection in ManageEngine ADSelfService Plus CVSS 3.1HIGH 8.1
  • TI-2025-24864 SQL injection in ManageEngine ADAudit Plus CVSS 3.1HIGH 8.3
See all 131 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences