Products
IT management & monitoring
ManageEngine ServiceDesk Plus
- Last 30 days
- 0
- Actively exploited (KEV)
- 0
- All CVEs
- 8
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-8309 | 8.1High |
ManageEngine Asset ExplorerManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus MSP
User privilege escalation vulnerability
|
0.27% |
2025-08-20
14 mo ago
|
| CVE-2025-3444 | 6.5Medium |
ManageEngine ServiceDesk Plus MSPManageEngine SupportCenter Plus
Local File Inclusion
|
1.64% |
2025-05-22
17 mo ago
|
| CVE-2024-50053 | 6.3Medium |
ManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus MSPManageEngine SupportCentre Plus
Stored XSS
|
1.14% |
2025-03-21
19 mo ago
|
| CVE-2024-41150 | 6.3Medium |
ManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus MSPManageEngine SupportCenter Plus
Stored XSS
|
1.27% |
2024-08-23
26 mo ago
|
| CVE-2024-27314 | 2.4Low |
ManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus MSPManageEngine SupportCenter Plus
Stored XSS Vulnerability
|
1.9% |
2024-05-27
29 mo ago
|
| CVE-2023-6105 | 5.5Medium |
ManageEngine Access Manager PlusManageEngine Asset ExplorerManageEngine ServiceDesk Plus
ManageEngine Information Disclosure in Multiple Products
|
0.69% |
2023-11-16
36 mo ago
|
| CVE-2017-11512 | Not scored |
Zoho ManageEngine ServiceDesk
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker c…
|
79.6% |
2017-11-09
109 mo ago
|
| CVE-2017-11511 | Not scored |
Zoho ManageEngine ServiceDesk
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker c…
|
3.56% |
2017-11-09
109 mo ago
|