CVE-2025-3444

<= 14.8

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File

6.5MEDIUM

CVE-2024-50053

< 14.9

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910

6.3MEDIUM

CVE-2024-41150

<= 14.7

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus M

6.3MEDIUM

CVE-2024-38869

<= 14.7

Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.T

8.3HIGH

CVE-2024-27314

<= 14.6

Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720

2.4LOW

CVE-2023-49943

< 14.5

Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time

5.4MEDIUM

CVE-2023-6105

< 14.3

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed.

5.5MEDIUM

CVE-2023-35785

< 14.3

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset

8.1HIGH

CVE-2023-34197

< 14.2

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a pri

5.4MEDIUM

CVE-2023-29443

< 14.0

Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExpl

4.9MEDIUM

CVE-2023-26601

< 14.0

Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Cent

7.5HIGH

CVE-2023-26600

< 13.0

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Expl

6.5MEDIUM

CVE-2023-22964

all versions

Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authen

9.1CRITICAL

CVE-2022-47966

< 13.0

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of

9.8CRITICAL

CVE-2022-40772

< 10.6

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sens

6.5MEDIUM

CVE-2022-40771

< 13.0

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Informat

4.9MEDIUM

CVE-2022-40770

< 10.6

Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploit

7.2HIGH

CVE-2022-40773

< 10.6

Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. Th

8.8HIGH

CVE-2022-35403

< 10.6

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affect

7.5HIGH

CVE-2022-32551

< 10.6

Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample

7.5HIGH

CVE-2021-44675

<= 10.5

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a fil

9.8CRITICAL

CVE-2021-44077

< 10.5

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulner

9.8CRITICAL

CVE-2021-31531

< 10.5

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

9.8CRITICAL

CVE-2021-31530

< 10.5

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.

7.5HIGH

CVE-2021-31160

< 10.5

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

7.5HIGH

CVE-2021-31159

>= 8.0 and <= 9.4

Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generati

5.3MEDIUM