How many ManageEngine SupportCenter Plus CVEs are in CISA KEV?

None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ManageEngine SupportCenter Plus are affected?

9 distinct ManageEngine SupportCenter Plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ManageEngine SupportCenter Plus CVEs?

ManageEngine SupportCenter Plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type).

What is the average severity of ManageEngine SupportCenter Plus CVEs?

The average CVSS base score across ManageEngine SupportCenter Plus's scored CVEs is 5.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ManageEngine

5 CVEs

ManageEngine SupportCenter Plus Vulnerabilities

Name: ManageEngine SupportCenter Plus vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for SupportCenter Plus by ManageEngine.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.5

Avg CVSS

2008–2025

Last updated August 20, 2025

Overview

ManageEngine SupportCenter Plus has 5 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ManageEngine SupportCenter Plus, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ManageEngine SupportCenter Plus's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ManageEngine SupportCenter Plus CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ManageEngine SupportCenter Plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 147301 CVE
< 149201 CVE
< 149401 CVE
<= 148001 CVE
7.0.0 <= v <= 7.0.01 CVE

Fixed in

> 148001 CVE
147301 CVE
149201 CVE
149401 CVE

Find a version

5 CVEs

Sort

User privilege escalation vulnerability
CVE-2025-8309
Patch
CWE-269
High · CVSS 8.1
EPSS 0.3% (17th pct)2025-08-20
Local File Inclusion
CVE-2025-3444
Patch
CWE-434
Medium · CVSS 6.5
EPSS 1.2% (66th pct)2025-05-22
Medium vulnerability · 2024-08-23
CVE-2024-41150
Patch
CWE-79
Medium · CVSS 6.3
EPSS 1.2% (65th pct)2024-08-23
Low vulnerability · 2024-05-27
CVE-2024-27314
Patch
CWE-79
Low · CVSS 2.4
EPSS 1.9% (78th pct)2024-05-27
Medium vulnerability · 2008-03-20
CVE-2008-1432
Medium · CVSS 4.3
EPSS 0.9% (55th pct)2008-03-20

Common weakness types

The CWE weakness categories most often found in ManageEngine SupportCenter Plus CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ManageEngine SupportCenter Plus CVEs were published each year.

2008

1

2024

2

2025

2

Other ManageEngine products

Browse vulnerabilities for other products by ManageEngine.

ADAudit Plus38 CVEs Applications Manager14 CVEs servicedesk plus14 CVEs Exchange Reporter Plus8 CVEs OpManager7 CVEs desktop central6 CVEs ADSelfService Plus5 CVEs password manager pro5 CVEs

All ManageEngine vulnerabilities

Frequently asked questions

Common questions about ManageEngine SupportCenter Plus vulnerabilities.

How many CVEs does ManageEngine SupportCenter Plus have?: ManageEngine SupportCenter Plus has 5 published CVE records since 2008.
How many ManageEngine SupportCenter Plus CVEs are in CISA KEV?: None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ManageEngine SupportCenter Plus vulnerabilities?: No ManageEngine SupportCenter Plus CVEs currently have a tracked public exploit in this dataset.
Which versions of ManageEngine SupportCenter Plus are affected?: 9 distinct ManageEngine SupportCenter Plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ManageEngine SupportCenter Plus CVEs?: ManageEngine SupportCenter Plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type).
What is the average severity of ManageEngine SupportCenter Plus CVEs?: The average CVSS base score across ManageEngine SupportCenter Plus's scored CVEs is 5.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ManageEngine SupportCenter Plus vulnerabilities

Monitor new ManageEngine SupportCenter Plus vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing