MS
Product
Manageengine Servicedesk Plus
On CISA KEVExploited in the wildRansomware-linked
50
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 33Low 1
Watch
Add Manageengine Servicedesk Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35682 | 8.8 | Mar 13 | Zoho ManageEngine ServiceDesk Plus before 11134 allows an Authentication Bypass (only during SAML login) Affected: before 11.1; 11.1; 11.1; 11.1; 11.1; 11.1; +29 more |
| CVE-2017-9362 | 8.8 | Mar 25 | ManageEngine ServiceDesk Plus before 9312 contains an XML injection at add Configuration items CMDB API Affected: before 9.3 |
| CVE-2023-35785 | 8.1 | Aug 28 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,… Affected: before 14.2; 14.2; 14.2; 14.2; 14.2; 14.2; +3 more |
| CVE-2019-12133 | 7.8 | Jun 18 | Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders Affected: 10.0.0 |
| CVE-2023-26601 | 7.5 | Mar 6 | Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service… Affected: before 14.1; 14.1; 14.1; 14.1; 14.1; 14.1 |
| CVE-2022-35403 | 7.5 | Jul 12 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure… Affected: before 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +3 more |
| CVE-2021-31160 | 7.5 | Jun 29 | Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data Affected: 10.5 |
| CVE-2020-14048 | 7.5 | Jun 12 | Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents Affected: 8.2; 8.2; 8.2; 8.2; 8.2; 8.2; +34 more |
| CVE-2019-15046 | 7.5 | Aug 14 | Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication, aka SD-79989 Affected: 10 before 10509 |
| CVE-2022-40770 | 7.2 | Nov 23 | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection Affected: before 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +6 more |
| CVE-2021-20081 | 7.2 | Jun 10 | Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM… Affected: before 11.2; 11.2; 11.2; 11.2; 11.2; 11.2 |
Showing 11