Manageengine servicedesk plus msp
This hub aggregates every CVE we track for Manageengine servicedesk plus msp, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
26
CVEs tracked
5
Critical
9
High
2
In CISA KEV
Severity distribution
MEDIUM11HIGH9CRITICAL5LOW1
Monthly trend
0
2
0
0
0
0
0
0
1
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Manageengine servicedesk plus msp.
- CVE-2025-3444Local File Inclusion6.5
- CVE-2024-50053Stored XSS6.3
- CVE-2024-41150Stored XSS6.3
- CVE-2024-38869Incorrect Authorization8.3
- CVE-2024-27314Stored XSS Vulnerability2.4
- CVE-2023-49943Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet.5.4
- CVE-2023-6105ManageEngine Information Disclosure in Multiple Products5.5
- CVE-2023-35785Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plu...8.1
- CVE-2023-34197Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows u...5.4
- CVE-2023-29443Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via...4.9
- CVE-2023-26600ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.6.5
- CVE-2023-26601Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).7.5
- CVE-2023-22964Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.9.1
- CVE-2022-47966Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because ...KEV9.8
- CVE-2022-40770Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.7.2
Product normalization is registry-driven with AI assist and human review. How it works