Skip to contentZohocorp Manageengine Supportcenter Plus vulnerabilities
- manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File InclusionCVE-2025-34446.5 Medium
- manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 moreStored XSSCVE-2024-411506.3 Medium
- manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 moreIncorrect AuthorizationCVE-2024-388698.3 High
- manageengine servicedesk plus, supportcenter plus, servicedesk plus, servicedesk plus msp, supportcenter plus +4 more +6 moreStored XSS VulnerabilityCVE-2024-273142.4 Low
- manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 Medium
- zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 High
- zohocorp manageengine supportcenter plusZoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS in the products...CVE-2023-383315.4 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...CVE-2023-341975.4 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.CVE-2023-294434.9 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...CVE-2023-26601EPSS 34.1%7.5 High
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...CVE-2023-266006.5 Medium
- zohocorp manageengine supportcenter plusOS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating...CVE-2023-23076EPSS 74.3%9.8 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...CVE-2022-407726.5 Medium
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...CVE-2022-407714.9 Medium
- zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...CVE-2022-40770EPSS 81.3%7.2 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the...CVE-2022-429033.3 Low
- zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...CVE-2022-407738.8 High
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to...CVE-2022-364129.8 Critical
- zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...CVE-2022-354037.5 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.CVE-2022-253735.4 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor.CVE-2021-432967.5 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts...CVE-2021-432956.1 Medium
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products...CVE-2021-432946.1 Medium
- zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...CVE-2021-44077In KEVPublic exploitEPSS 93.5%9.8 Critical
- zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 moreMultiple Zoho ManageEngine products suffer from local privilege escalation due to improper...CVE-2019-121337.8 High
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored...CVE-2018-169656.1 Medium
- zohocorp manageengine supportcenter plusMultiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90...CVE-2015-5150Public exploit3.5 Low
- zohocorp manageengine supportcenter plusDirectory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote...CVE-2015-5149Public exploitEPSS 10.4%5.5 Medium
- zohocorp manageengine supportcenter plusMultiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9...CVE-2015-08664.3 Medium
- zohocorp manageengine supportcenter plusDirectory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows...CVE-2014-100002Public exploitEPSS 59.9%5.0 Medium