Manageengine Servicedesk Plus Msp

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-3444 MEDIUM This Month

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Manageengine Servicedesk Plus Msp Manageengine Supportcenter Plus

NVD

CVSS 3.1

6.5

EPSS

1.1%

CVE-2024-50053 MEDIUM This Month

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Manageengine Servicedesk Plus Manageengine Servicedesk Plus Msp Manageengine Supportcentre Plus

NVD

CVSS 3.1

6.3

EPSS

0.1%

CVE-2025-3444

EPSS 1% CVSS 6.5

MEDIUM This Month

File Upload Manageengine Servicedesk Plus Msp Manageengine Supportcenter Plus

NVD

CVE-2024-50053

EPSS 0% CVSS 6.3

MEDIUM This Month

XSS Manageengine Servicedesk Plus Manageengine Servicedesk Plus Msp +1

NVD