What’s Vulnerable › Products

ManageEngine ServiceDesk Plus vulnerabilities

50 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your ManageEngine ServiceDesk Plus version is affected

Exploited ManageEngine ServiceDesk Plus vulnerabilities

• CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
• CVE-2021-44077 — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
• CVE-2021-37415 — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
• CVE-2019-8394 — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Latest ManageEngine ServiceDesk Plus vulnerabilities

• CVE-2024-50053 — Stored XSS (CVSS 5.4)
• CVE-2024-41150 — Stored XSS (CVSS 6.1)
• CVE-2024-38869 — Incorrect Authorization (CVSS 5.4)
• CVE-2024-27314 — Stored XSS Vulnerability (CVSS 2.4)
• CVE-2023-6105 — ManageEngine Information Disclosure in Multiple Products (CVSS 5.5)
• CVE-2023-35785 — (CVSS 8.1)
• CVE-2023-34197 — (CVSS 5.4)
• CVE-2023-29443 — (CVSS 4.9)
• CVE-2023-26601 — (CVSS 7.5)
• CVE-2023-26600 — (CVSS 6.5)
• CVE-2023-23078 — (CVSS 6.1)
• CVE-2023-23077 — (CVSS 6.1)
• CVE-2023-23074 — (CVSS 6.1)
• CVE-2023-23073 — (CVSS 6.1)
• CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2022-40772 — (CVSS 6.5)
• CVE-2022-40771 — (CVSS 4.9)
• CVE-2022-40770 — (CVSS 7.2)
• CVE-2022-35403 — (CVSS 7.5)
• CVE-2022-25245 — (CVSS 5.3)
• CVE-2021-46065 — (CVSS 4.8)
• CVE-2021-44526 — (CVSS 9.8)
• CVE-2021-44077 — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2021-37415 — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability (CVSS 9.8) — exploited
• CVE-2021-31160 — (CVSS 7.5)