CVE-2023-26601

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus versions through 14104 Zoho ManageEngine Asset Explorer versions through 6987 Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14000 Zoho ManageEngine Support Center Plus versions prior to 14000

Description The issue allows for Denial-of-Service (DoS). It is related to improper input validation in the ImageUploadServlet of ManageEngine ServiceDesk Plus.

Recommendations For Zoho ManageEngine ServiceDesk Plus versions through 14104, update to a version after 14104 to resolve the issue. For Zoho ManageEngine Asset Explorer versions through 6987, update to a version after 6987 to resolve the issue. For Zoho ManageEngine ServiceDesk Plus MSP versions prior to 14000, update to version 14000 or later to resolve the issue. For Zoho ManageEngine Support Center Plus versions prior to 14000, update to version 14000 or later to resolve the issue. As a temporary workaround, consider restricting access to the ImageUploadServlet to minimize the risk of exploitation.