Approved changes feed: RSS · Atom

cpe:2.3:a:manageengine:servicedesk_plus:7.6:*:*:*:*:*:*:*

part: a version: 7.6 update: *

VendorManageengine (b7eba64e-d5d7-5395-be8c-84fe138ee37e)
ProductServicedesk Plus (50ba9cbe-4744-57a0-a7a9-e726deb9a542)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/devynspencer/powershell-sdp purl2cpe 2026-06-01 10:13:05.020709

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2757 vulnerable 2026-06-03 14:31:10.729986 Details available
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.
Published: 2011-07-17T20:00:00.000Z
Updated: 2024-09-16T22:50:37.256Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.