Zoho Corporation ManageEngine ServiceDesk Plus MSP 14.9 14900
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14900:*:*:*:*:*:*
part: a version: 14.9 update: 14900
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Servicedesk Plus Msp (e2c7e134-94e2-52f3-b9ab-d3a2225cb0a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3444 |
vulnerable | 2026-06-03 15:01:04.422539 |
Local File Inclusion
MEDIUM (6.5)
Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.
Published: 2025-05-22T10:31:48.562Z
Updated: 2025-05-22T18:28:27.922Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50053 |
vulnerable | 2026-06-03 14:57:23.579037 |
Stored XSS
MEDIUM (6.3)
Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.
Published: 2025-03-21T06:01:39.945Z
Updated: 2025-05-05T13:24:19.125Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.