Skip to contentZohocorp Manageengine Servicedesk Plus vulnerabilities
- manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File InclusionCVE-2025-34446.5 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 moreStored XSSCVE-2024-500536.3 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 moreStored XSSCVE-2024-411506.3 Medium
- manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 moreIncorrect AuthorizationCVE-2024-388698.3 High
- manageengine servicedesk plus, supportcenter plus, servicedesk plus, servicedesk plus msp, supportcenter plus +4 more +6 moreStored XSS VulnerabilityCVE-2024-273142.4 Low
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged...CVE-2023-499435.4 Medium
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...CVE-2023-341975.4 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.CVE-2023-294434.9 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...CVE-2023-26601EPSS 34.1%7.5 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...CVE-2023-266006.5 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment...CVE-2023-230786.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment...CVE-2023-230776.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding...CVE-2023-23074EPSS 83.6%6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the...CVE-2023-230736.1 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP through 13003 is vulnerable to authentication bypass due...CVE-2023-229649.1 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...CVE-2022-407726.5 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...CVE-2022-407714.9 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...CVE-2022-40770EPSS 81.3%7.2 High
- zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...CVE-2022-407738.8 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...CVE-2022-354037.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from...CVE-2022-325517.5 High
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default...CVE-2022-252455.3 Medium
- zohocorp manageengine servicedesk plusA Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine...CVE-2021-46065EPSS 92.3%4.8 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin...CVE-2021-445269.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated...CVE-2021-446759.8 Critical
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...CVE-2021-44077In KEVPublic exploitEPSS 93.5%9.8 Critical
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 moreZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that...CVE-2021-37415In KEVEPSS 99.8%9.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery ...CVE-2021-315319.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.CVE-2021-315307.5 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.CVE-2021-311607.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...CVE-2021-31159Public exploitEPSS 17.8%5.3 Medium
- zoho manageengine servicedesk plusIncomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows...CVE-2021-20081EPSS 52.4%7.2 High
- zoho manageengine servicedesk plusInsufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and...CVE-2021-20080EPSS 93.1%6.1 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML...CVE-2020-35682Public exploit8.8 High
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated...CVE-2020-140487.5 High
- zohocorp manageengine servicedesk plusZoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users...CVE-2020-131546.5 Medium
- zohocorp manageengine servicedesk plusDefault installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to...CVE-2019-15083Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS.CVE-2020-68434.8 Medium
- zohocorp manageengine servicedesk plus** DISPUTED ** AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration...CVE-2019-15045Disputed5.3 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information...CVE-2019-150467.5 High
- zohocorp manageengine servicedesk plusAn issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is...CVE-2019-125396.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the...CVE-2019-125406.1 Medium
- zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 moreMultiple Zoho ManageEngine products suffer from local privilege escalation due to improper...CVE-2019-121337.8 High
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12538Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12541Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN...CVE-2019-12542Public exploit6.1 Medium
- zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12543Public exploit6.1 Medium
- Show olderLoading…