Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Zohocorp
Servicedesk Plus

Zohocorp Servicedesk Plus vulnerabilities

manageengine servicedesk plus msp, supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreLocal File InclusionCVE-2025-34446.5 MediumMay 22, 2025
manageengine servicedesk plus, servicedesk plus msp, supportcentre plus +3 more +5 moreStored XSSCVE-2024-500536.3 MediumMarch 21, 2025
manageengine servicedesk plus, servicedesk plus msp, supportcenter plus +3 more +5 moreStored XSSCVE-2024-411506.3 MediumAugust 23, 2024
manageengine endpoint central, zohocorp manageengine endpoint central, manageengine servicedesk plus +2 more +4 moreIncorrect AuthorizationCVE-2024-388698.3 HighAugust 23, 2024
manageengine servicedesk plus, supportcenter plus, servicedesk plus, servicedesk plus msp, supportcenter plus +4 more +6 moreStored XSS VulnerabilityCVE-2024-273142.4 LowMay 27, 2024
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged...CVE-2023-499435.4 MediumJanuary 18, 2024
manageengine access manager plus, asset explorer, service desk plus +39 more +41 moreManageEngine Information Disclosure in Multiple ProductsCVE-2023-61055.5 MediumNovember 15, 2023
zohocorp manageengine admanager plus, manageengine ad360, manageengine adaudit plus +14 more +16 moreZoho ManageEngine ADManager Plus through 7186 is vulnerable to 2FA bypass.CVE-2023-357858.1 HighAugust 28, 2023
zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and...CVE-2023-341975.4 MediumJuly 7, 2023
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104 allows admin users to conduct an XXE attack.CVE-2023-294434.9 MediumApril 26, 2023
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus...CVE-2023-26601EPSS 34.1%7.5 HighMarch 6, 2023
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center...CVE-2023-266006.5 MediumMarch 6, 2023
zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment...CVE-2023-230786.1 MediumFebruary 1, 2023
zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment...CVE-2023-230776.1 MediumFebruary 1, 2023
zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding...CVE-2023-23074EPSS 83.6%6.1 MediumFebruary 1, 2023
zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the...CVE-2023-230736.1 MediumFebruary 1, 2023
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP through 13003 is vulnerable to authentication bypass due...CVE-2023-229649.1 CriticalJanuary 20, 2023
zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...CVE-2022-47966In KEVPublic exploitEPSS 99.8%9.8 CriticalJanuary 18, 2023
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass...CVE-2022-407726.5 MediumNovember 23, 2022
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External...CVE-2022-407714.9 MediumNovember 23, 2022
zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp, manageengine supportcenter plus +2 moreZoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated...CVE-2022-40770EPSS 81.3%7.2 HighNovember 23, 2022
zohocorp manageengine servicedesk plus msp, manageengine supportcenter plus +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are...CVE-2022-407738.8 HighNovember 12, 2022
zohocorp manageengine servicedesk plus, manageengine assetexplorer, manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...CVE-2022-354037.5 HighJuly 12, 2022
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from...CVE-2022-325517.5 HighJuly 1, 2022
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default...CVE-2022-252455.3 MediumApril 5, 2022
zohocorp manageengine servicedesk plusA Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine...CVE-2021-46065EPSS 92.3%4.8 MediumJanuary 27, 2022
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin...CVE-2021-445269.8 CriticalDecember 23, 2021
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated...CVE-2021-446759.8 CriticalDecember 20, 2021
zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) / supportcenter plus, zohocorp manageengine servicedesk plus msp +1 more +3 moreZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and...CVE-2021-44077In KEVPublic exploitEPSS 93.5%9.8 CriticalNovember 29, 2021
zohocorp manageengine servicedesk plus, zoho manageengine servicedesk plus (sdp) +1 moreZoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that...CVE-2021-37415In KEVEPSS 99.8%9.8 CriticalSeptember 1, 2021
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery ...CVE-2021-315319.8 CriticalJune 29, 2021
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.CVE-2021-315307.5 HighJune 29, 2021
zohocorp manageengine servicedesk plus, manageengine servicedesk plus msp +1 moreZoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.CVE-2021-311607.5 HighJune 29, 2021
zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due...CVE-2021-31159Public exploitEPSS 17.8%5.3 MediumJune 16, 2021
zoho manageengine servicedesk plusIncomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows...CVE-2021-20081EPSS 52.4%7.2 HighJune 10, 2021
zoho manageengine servicedesk plusInsufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and...CVE-2021-20080EPSS 93.1%6.1 MediumApril 9, 2021
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML...CVE-2020-35682Public exploit8.8 HighMarch 13, 2021
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated...CVE-2020-140487.5 HighJune 12, 2020
zohocorp manageengine servicedesk plusZoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users...CVE-2020-131546.5 MediumMay 18, 2020
zohocorp manageengine servicedesk plusDefault installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to...CVE-2019-15083Public exploit6.1 MediumMay 14, 2020
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS.CVE-2020-68434.8 MediumJanuary 23, 2020
zohocorp manageengine servicedesk plus** DISPUTED ** AjaxDomainServlet in Zoho ManageEngine ServiceDesk Plus 10 allows User Enumeration...CVE-2019-15045Disputed5.3 MediumAugust 21, 2019
zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information...CVE-2019-150467.5 HighAugust 14, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is...CVE-2019-125396.1 MediumJuly 11, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the...CVE-2019-125406.1 MediumJuly 11, 2019
zohocorp manageengine analytics plus, manageengine browser security plus, manageengine desktop central +15 more +17 moreMultiple Zoho ManageEngine products suffer from local privilege escalation due to improper...CVE-2019-121337.8 HighJune 18, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12538Public exploit6.1 MediumJune 5, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12541Public exploit6.1 MediumJune 5, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN...CVE-2019-12542Public exploit6.1 MediumJune 5, 2019
zohocorp manageengine servicedesk plusAn issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the...CVE-2019-12543Public exploit6.1 MediumJune 5, 2019
Show olderLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open