Manageengine Supportcenter Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zohocorp (4f1ab088-ab0e-54ac-b0dc-2304879a7502) |
|---|---|
| Product | Manageengine Supportcenter Plus (5d8dfbb9-2ea1-5b43-85c1-a989ef362419) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3444 |
vulnerable | 2026-06-08 07:23:08.865193 |
Local File Inclusion
MEDIUM (6.5)
Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.
Published: 2025-05-22T10:31:48.562Z
Updated: 2025-05-22T18:28:27.922Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41150 |
vulnerable | 2026-06-08 06:43:54.110407 |
Stored XSS
MEDIUM (6.3)
An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; SupportCenter Plus: through 14800.
Published: 2024-08-23T14:08:17.169Z
Updated: 2024-08-23T14:38:15.256Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38869 |
vulnerable | 2026-06-08 06:41:48.532395 |
Incorrect Authorization
HIGH (8.3)
Zohocorp ManageEngine Endpoint Central affected by Incorrect authorization vulnerability in remote office deploy configurations.This issue affects Endpoint Central: before 11.3.2416.04 and before 11.3.2400.25.
Published: 2024-08-23T14:07:46.792Z
Updated: 2024-08-30T18:47:26.580Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27314 |
vulnerable | 2026-06-08 06:31:28.518442 |
Stored XSS Vulnerability
LOW (2.4)
Zoho ManageEngine ServiceDesk Plus versions below 14730, ServiceDesk Plus MSP below 14720 and SupportCenter Plus below 14720 are vulnerable to stored XSS in the Custom Actions menu on the request details. This vulnerability can be exploited only by the SDAdmin role users.
Published: 2024-05-27T07:03:13.441Z
Updated: 2024-08-02T00:27:59.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6105 |
vulnerable | 2026-06-08 06:19:46.213745 |
ManageEngine Information Disclosure in Multiple Products
MEDIUM (5.5)
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database.
Published: 2023-11-15T20:57:47.981Z
Updated: 2025-02-13T17:26:03.759Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35785 |
vulnerable | 2026-06-08 06:06:27.728537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34197 |
vulnerable | 2026-06-08 06:06:24.871412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29443 |
vulnerable | 2026-06-08 06:02:40.241017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26601 |
vulnerable | 2026-06-08 05:57:40.267073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26600 |
vulnerable | 2026-06-08 05:57:40.224370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40773 |
vulnerable | 2026-06-08 05:48:28.170836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40772 |
vulnerable | 2026-06-08 05:48:28.167550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40771 |
vulnerable | 2026-06-08 05:48:28.141768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40770 |
vulnerable | 2026-06-08 05:48:28.115243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35403 |
vulnerable | 2026-06-08 05:46:04.585440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25373 |
vulnerable | 2026-06-08 05:41:45.862697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44077 |
vulnerable | 2026-06-08 05:36:44.903233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16965 |
vulnerable | 2026-06-08 05:11:05.791295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0866 |
vulnerable | 2026-06-08 05:06:24.115508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.