Skip to contentZohocorp Manageengine Servicedesk Plus Msp vulnerabilities
- manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File InclusionCVE-2025-34446.5 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 moreStored XSSCVE-2024-500536.3 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 moreStored XSSCVE-2024-411506.3 Medium
- manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 moreIncorrect AuthorizationCVE-2024-388698.3 High
- manageengine servicedesk plus, supportcenter plus, servicedesk plus, servicedesk plus msp, supportcenter plus +4 more +6 moreStored XSS VulnerabilityCVE-2024-273142.4 Low
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged...CVE-2023-499435.4 Medium
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...CVE-2023-341975.4 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.CVE-2023-294434.9 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...CVE-2023-26601EPSS 34.1%7.5 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...CVE-2023-266006.5 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP through 13003 is vulnerable to authentication bypass due...CVE-2023-229649.1 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...CVE-2022-407726.5 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...CVE-2022-407714.9 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...CVE-2022-40770EPSS 81.3%7.2 High
- zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...CVE-2022-407738.8 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...CVE-2022-354037.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from...CVE-2022-325517.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated...CVE-2021-446759.8 Critical
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...CVE-2021-44077In KEVPublic exploitEPSS 93.5%9.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery ...CVE-2021-315319.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.CVE-2021-315307.5 High
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.CVE-2021-311607.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...CVE-2021-31159Public exploitEPSS 17.8%5.3 Medium