Where
-Infinity
0

ManageEngine ServiceDesk Plus MSPManageEngine ServiceDesk Plus MSP generateSQLReport Improper Input Validation Privilege Escalation Vulnerability

Risk 37
First published (updated )
Advisory
ZDI-23-229

ManageEngine ServiceDesk Plus MSPZDI-23-229: ManageEngine ServiceDesk Plus MSP generateSQLReport Improper Input Validation Privilege Escalation Vulnerability

Risk 37
First published (updated )

ManageEngine ServiceDesk PlusManageEngine ServiceDesk Plus ImageUploadServlet Improper Input Validation Denial-of-Service Vulnerability

Risk 31
First published (updated )
Advisory
ZDI-23-230

ManageEngine ServiceDesk PlusZDI-23-230: ManageEngine ServiceDesk Plus ImageUploadServlet Improper Input Validation Denial-of-Service Vulnerability

Risk 31
First published (updated )

ZohoCorp Servicedesk PlusZoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an estab…

Risk 79
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine ServiceDeskPath Traversal

Risk 43
Severity
7.5
First published (updated )

ManageEngine ServiceDesk PlusPath Traversal

Risk 78
Severity
9
First published (updated )

ManageEngine ServiceDesk PlusPath Traversal

Risk 78
Severity
9
First published (updated )

ZohoCorp Servicedesk PlusXSS

Risk 34
Severity
5.4
First published (updated )

ZohoCorp Servicedesk PlusZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which …

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ZohoCorp Servicedesk PlusZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspec…

Risk 79
Severity
8.8
First published (updated )

ManageEngine ServiceDesk PlusInfoleak

Risk 21
Severity
4
First published (updated )

ManageEngine ServiceDesk PlusXSS

Risk 22
Severity
4.3
First published (updated )

ManageEngine ServiceDesk PlusXSS

Risk 22
Severity
4.3
First published (updated )

ManageEngine ServiceDesk PlusThe encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier use…

Risk 26
Severity
5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

ManageEngine ServiceDesk PlusPath Traversal

Risk 26
Severity
5
First published (updated )

ManageEngine ServiceDesk PlusPath Traversal

Risk 26
Severity
5
First published (updated )

ManageEngine ServiceDesk PlusFileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authenticat…

Risk 26
Severity
5
First published (updated )

ManageEngine ServiceDesk PlusXSS

Risk 38
Severity
6.1
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203