How many ManageEngine servicedesk plus CVEs are in CISA KEV?

None of ManageEngine servicedesk plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ManageEngine servicedesk plus are affected?

14 distinct ManageEngine servicedesk plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ManageEngine servicedesk plus CVEs?

ManageEngine servicedesk plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management).

What is the average severity of ManageEngine servicedesk plus CVEs?

The average CVSS base score across ManageEngine servicedesk plus's scored CVEs is 5.7.

RadicalNotion.AI

Log in Start free

ManageEngine

14 CVEs

ManageEngine servicedesk plus Vulnerabilities

Name: ManageEngine servicedesk plus vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for servicedesk plus by ManageEngine.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

5.7

Avg CVSS

2008–2025

Last updated August 20, 2025

Overview

ManageEngine servicedesk plus has 14 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ManageEngine servicedesk plus, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of ManageEngine servicedesk plus's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium10

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ManageEngine servicedesk plus's CVEs are currently listed in CISA's KEV catalog.

Public exploits

6

6 of ManageEngine servicedesk plus's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every ManageEngine servicedesk plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

8.0 <= v <= 8.04 CVEs
7.0.0 <= v <= 7.0.02 CVEs
< 147301 CVE
< 151101 CVE
<= 148101 CVE
<= 149101 CVE
<= 8.01 CVE
<= 8.0.0.121 CVE
<= 80121 CVE
<= 9.01 CVE
7.6 <= v <= 7.61 CVE
8.1 <= v <= 8.11 CVE

Fixed in

147301 CVE
151101 CVE

Find a version

14 CVEs

Sort

User privilege escalation vulnerability
CVE-2025-8309
Patch
CWE-269
High · CVSS 8.1
EPSS 0.3% (18th pct)2025-08-20
Medium vulnerability · 2025-03-21
CVE-2024-50053
Patch
CWE-79
Medium · CVSS 6.3
EPSS 1.1% (64th pct)2025-03-21
Medium vulnerability · 2024-08-23
CVE-2024-41150CWE-79
Medium · CVSS 6.3
EPSS 1.3% (69th pct)2024-08-23
Low vulnerability · 2024-05-27
CVE-2024-27314
Patch
CWE-79
Low · CVSS 2.4
EPSS 1.9% (79th pct)2024-05-27
High vulnerability · 2017-08-28
CVE-2014-5302
Public exploit
CWE-22
High · CVSS 8.8
EPSS 10.7% (96th pct)2017-08-28
High vulnerability · 2017-08-28
CVE-2014-5301
Public exploit
CWE-22
High · CVSS 8.8
EPSS 78.4% (100th pct)2017-08-28
Medium vulnerability · 2015-02-04
CVE-2015-1480
Public exploit
CWE-200
Medium · CVSS 4.0
EPSS 6.3% (93th pct)2015-02-04
Medium vulnerability · 2012-08-12
CVE-2012-2585
Public exploit
CWE-79
Medium · CVSS 4.3
EPSS 1.4% (70th pct)2012-08-12
Medium vulnerability · 2011-09-20
CVE-2011-1510CWE-79
Medium · CVSS 4.3
EPSS 1.1% (64th pct)2011-09-20
Medium vulnerability · 2011-09-20
CVE-2011-1509CWE-310
Medium · CVSS 5.0
EPSS 0.8% (55th pct)2011-09-20
Medium vulnerability · 2011-07-17
CVE-2011-2757
Public exploit
CWE-22
Medium · CVSS 5.0
EPSS 39.4% (99th pct)2011-07-17
Medium vulnerability · 2011-07-17
CVE-2011-2756CWE-287
Medium · CVSS 5.0
EPSS 2.0% (80th pct)2011-07-17
Medium vulnerability · 2011-07-17
CVE-2011-2755
Public exploit
CWE-22
Medium · CVSS 5.0
EPSS 30.9% (98th pct)2011-07-17
Medium vulnerability · 2008-03-12
CVE-2008-1299CWE-79
Medium · CVSS 6.1
EPSS 0.8% (55th pct)2008-03-12

Common weakness types

The CWE weakness categories most often found in ManageEngine servicedesk plus CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ManageEngine servicedesk plus CVEs were published each year.

2008

1

2011

5

2012

1

2015

1

2017

2

2024

2

2025

2

Other ManageEngine products

Browse vulnerabilities for other products by ManageEngine.

ADAudit Plus38 CVEs Applications Manager14 CVEs Exchange Reporter Plus8 CVEs OpManager7 CVEs desktop central6 CVEs ADSelfService Plus5 CVEs password manager pro5 CVEs SupportCenter Plus5 CVEs

All ManageEngine vulnerabilities

Frequently asked questions

Common questions about ManageEngine servicedesk plus vulnerabilities.

How many CVEs does ManageEngine servicedesk plus have?: ManageEngine servicedesk plus has 14 published CVE records since 2008.
How many ManageEngine servicedesk plus CVEs are in CISA KEV?: None of ManageEngine servicedesk plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ManageEngine servicedesk plus vulnerabilities?: Yes — 6 of ManageEngine servicedesk plus's CVEs have a known public exploit.
Which versions of ManageEngine servicedesk plus are affected?: 14 distinct ManageEngine servicedesk plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ManageEngine servicedesk plus CVEs?: ManageEngine servicedesk plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-269 (Improper Privilege Management).
What is the average severity of ManageEngine servicedesk plus CVEs?: The average CVSS base score across ManageEngine servicedesk plus's scored CVEs is 5.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ManageEngine servicedesk plus vulnerabilities

Monitor new ManageEngine servicedesk plus vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing