ManageEngine (SharePoint Manager Plus) Product November 2024 Security Update Advisory

Overview

 

Zoho(https://www.zohocorp.com/) has released a security update that addresses a vulnerability in its ManageEngine suite of products. Users of affected products are advised to update to the latest version.

 

Affected Products

 

SharePoint Manager Plus build 4503 or below version

 

Resolved Vulnerabilities

 

High Impact XML External Object (XXE) Vulnerability in SharePoint Manager Plus (CVE-2024-10839) [1] 

 

Vulnerability Patches

 

Please follow the security advisory published on November 8, 2018 to update to the appropriate version and the latest version.

SharePoint Manager Plus build 4504 version

 

Referenced Sites

 

[1] CVE-2024-10839 – XML External Entity Vulnerability

https://www.manageengine.com/sharepoint-management-reporting/advisory/CVE-2024-10839.html