MS
Product
Manageengine Servicedesk Plus Msp
On CISA KEVExploited in the wildRansomware-linked
26
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 12Low 1
Watch
Add Manageengine Servicedesk Plus Msp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47966 RansomwareIn wildKEV | 9.8 | Jan 18 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Affected: before 13.0; 13.0 |
| CVE-2021-44077 In wildKEV | 9.8 | Nov 29 | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability Affected: before 10.5; 10.5; 10.5; 10.5; 10.5; 10.5; +25 more |
| CVE-2021-44675 | 9.8 | Dec 20 | Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not… Affected: through 10.5; 10.5; 10.5; 10.5; 10.5; 10.5; +29 more |
| CVE-2021-31531 | 9.8 | Jun 29 | Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF) Affected: before 10.5; 10.5; 10.5; 10.5; 10.5; 10.5; +17 more |
| CVE-2023-22964 | 9.1 | Jan 20 | Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled Affected: 10.6; 10.6; 10.6; 10.6; 10.6; 10.6; +9 more |
Showing 5