Manageengine Servicedesk vulnerabilities

• manageengine asset explorer, servicedesk plus, servicedesk plus msp +1 more +3 more User privilege escalation vulnerability CVE-2025-8309 8.1 HighAugust 20, 2025
• manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 more Local File Inclusion CVE-2025-3444 6.5 MediumMay 22, 2025
• manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 more Stored XSS CVE-2024-50053 6.3 MediumMarch 21, 2025
• manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 more Stored XSS CVE-2024-41150 6.3 MediumAugust 23, 2024
• manageengine servicedesk plus, supportcenter plus, servicedesk plus, servicedesk plus msp, supportcenter plus +4 more +6 more Stored XSS Vulnerability CVE-2024-27314 2.4 LowMay 27, 2024
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11512 EPSS 79.6% 7.5 HighNovember 8, 2017
• manageengine servicedesk, zoho manageengine servicedesk +1 more The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper... CVE-2017-11511 7.5 HighNovember 8, 2017
• manageengine assetexplorer, it360, servicedesk plus +1 more +3 more Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030;... CVE-2014-5302 EPSS 10.7% 8.8 HighAugust 28, 2017
• manageengine assetexplorer, it360, servicedesk plus +1 more +3 more Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to... CVE-2014-5301 Public exploit EPSS 78.4% 8.8 HighAugust 28, 2017
• manageengine servicedesk plus ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users... CVE-2015-1480 Public exploit 4.0 MediumFebruary 4, 2015
• manageengine servicedesk plus Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow... CVE-2012-2585 Public exploit 4.3 MediumAugust 12, 2012
• manageengine servicedesk plus Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus ... CVE-2011-1510 4.3 MediumSeptember 20, 2011
• manageengine servicedesk plus The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier... CVE-2011-1509 5.0 MediumSeptember 20, 2011
• manageengine servicedesk plus Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12... CVE-2011-2757 Public exploit EPSS 39.4% 5.0 MediumJuly 17, 2011
• manageengine servicedesk plus FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require... CVE-2011-2756 5.0 MediumJuly 17, 2011
• manageengine servicedesk plus Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before... CVE-2011-2755 Public exploit EPSS 30.9% 5.0 MediumJuly 17, 2011
• manageengine servicedesk plus Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7... CVE-2008-1299 4.3 MediumMarch 12, 2008