Login Request a demo
MS
Product
Manageengine Servicedesk Plus
by Zohocorp · last CVE Mar 21, 2025
On CISA KEVExploited in the wildRansomware-linked
50
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities50In the news0Timeline
Severity mix
Critical 5High 11Medium 33Low 1
Severity
All severities50Critical5High11Medium33Low1
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Manageengine Servicedesk Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-47966
RansomwareIn wildKEV
9.8
100%
Jan 18
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Affected: before 14.0; 14.0; 14.0; 14.0; 14.0
CVE-2021-44077
In wildKEV
9.8
93%
Nov 29
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Affected: before 11.1; 11.1; 11.1; 11.1; 11.1; 11.1; +21 more
CVE-2021-37415
In wildKEV
9.8
100%
Sep 1
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2021-44526
9.8
3%
Dec 23
Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations
Affected: 8.1; 8.2; 8.2; 8.2; 8.2; 8.2; +34 more
CVE-2019-8395
9.8
7%
Feb 17
An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request
Affected: before 10.0
Showing 5