MS
Product
Manageengine Servicedesk Plus Msp
On CISA KEVExploited in the wildRansomware-linked
26
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 12Low 1
Watch
Add Manageengine Servicedesk Plus Msp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-40773 | 8.8 | Nov 12 | Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation Affected: before 10.6; 10.6; 10.6; 10.6; 10.6; 10.6; +5 more |
| CVE-2023-35785 | 8.1 | Aug 28 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below,… Affected: before 14.3; 14.3 |
| CVE-2023-26601 | 7.5 | Mar 6 | Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service… Affected: before 14.0; 14.0 |
| CVE-2022-35403 | 7.5 | Jul 12 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure… Affected: before 10.6; 10.6; 10.6; 10.6; 10.6; 10.6; +1 more |
| CVE-2022-32551 | 7.5 | Jul 2 | Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml) Affected: before 10.6; 10.6; 10.6; 10.6; 10.6; 10.6 |
| CVE-2021-31530 | 7.5 | Jun 29 | Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure Affected: before 10.5; 10.5; 10.5; 10.5; 10.5; 10.5; +18 more |
| CVE-2021-31160 | 7.5 | Jun 29 | Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data Affected: before 10.5; 10.5; 10.5; 10.5; 10.5; 10.5; +16 more |
| CVE-2022-40770 | 7.2 | Nov 23 | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection Affected: before 10.6; 10.6; 10.6; 10.6; 10.6; 10.6; +7 more |
Showing 8