Product · ManageEngine

ServiceDesk Plus MSP

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.5

CVE-2025-3444

Local File Inclusion

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.

ManageEngine ServiceDesk Plus MSP SupportCenter Plus

May 22, 2025
Medium 6.3

CVE-2024-50053

Stored XSS

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.

ManageEngine ServiceDesk Plus MSP ServiceDesk Plus SupportCentre Plus

Mar 21, 2025
Medium 6.3

CVE-2024-41150

Stored XSS

An Stored Cross-site Scripting vulnerability in request module affects Zohocorp ManageEngine ServiceDesk Plus, ServiceDesk Plus MSP and SupportCenter Plus.This issue affects ServiceDesk Plus versions: through 14810; ServiceDesk Plus MSP: through 14800; Suppor…

ManageEngine ServiceDesk Plus MSP ServiceDesk Plus SupportCenter Plus

Aug 23, 2024