How many ManageEngine SupportCenter Plus CVEs are in CISA KEV?

None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ManageEngine SupportCenter Plus are affected?

8 distinct ManageEngine SupportCenter Plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ManageEngine SupportCenter Plus CVEs?

ManageEngine SupportCenter Plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type).

What is the average severity of ManageEngine SupportCenter Plus CVEs?

The average CVSS base score across ManageEngine SupportCenter Plus's scored CVEs is 5.5.

ManageEngine SupportCenter Plus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: ManageEngine SupportCenter Plus vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

ManageEngine SupportCenter Plus has 5 published CVE records since 2008, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

Severity and exploitation

How the CVSS severity of ManageEngine SupportCenter Plus's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No ManageEngine SupportCenter Plus CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ManageEngine SupportCenter Plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 147301 CVE
< 149201 CVE
< 149401 CVE
<= 148001 CVE
7.0.01 CVE

Fixed in

147301 CVE
149201 CVE
149401 CVE

Find a version

5 CVEs

Sort

User privilege escalation vulnerability
CVE-2025-8309
Patch
CWE-269
High · CVSS 8.1
EPSS 0.3% (19th pct)2025-08-20
Local File Inclusion
CVE-2025-3444
Patch
CWE-434
Medium · CVSS 6.5
EPSS 1.6% (77th pct)2025-05-22
Stored XSS
CVE-2024-41150CWE-79
Medium · CVSS 6.3
EPSS 1.3% (70th pct)2024-08-23
Stored XSS Vulnerability
CVE-2024-27314
Patch
CWE-79
Low · CVSS 2.4
EPSS 1.9% (80th pct)2024-05-27
Medium vulnerability · 2008-03-20
CVE-2008-1432CWE-79
Medium · CVSS 4.3
EPSS 0.9% (59th pct)2008-03-20

Common weakness types

The CWE weakness categories most often found in ManageEngine SupportCenter Plus CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ManageEngine SupportCenter Plus CVEs were published each year.

2024

2025

Other ManageEngine products

Browse vulnerabilities for other products by ManageEngine.

ADAudit Plus38 CVEs Applications Manager14 CVEs ServiceDesk Plus14 CVEs Exchange Reporter Plus8 CVEs OpManager7 CVEs Desktop Central6 CVEs ADSelfService Plus5 CVEs

Frequently asked questions

Common questions about ManageEngine SupportCenter Plus vulnerabilities.

How many CVEs does ManageEngine SupportCenter Plus have?: ManageEngine SupportCenter Plus has 5 published CVE records since 2008.
How many ManageEngine SupportCenter Plus CVEs are in CISA KEV?: None of ManageEngine SupportCenter Plus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ManageEngine SupportCenter Plus vulnerabilities?: No ManageEngine SupportCenter Plus CVEs currently have a tracked public exploit in this dataset.
Which versions of ManageEngine SupportCenter Plus are affected?: 8 distinct ManageEngine SupportCenter Plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ManageEngine SupportCenter Plus CVEs?: ManageEngine SupportCenter Plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-269 (Improper Privilege Management), CWE-434 (Unrestricted Upload of File with Dangerous Type).
What is the average severity of ManageEngine SupportCenter Plus CVEs?: The average CVSS base score across ManageEngine SupportCenter Plus's scored CVEs is 5.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ManageEngine SupportCenter Plus vulnerabilities

Get an alert for each new ManageEngine SupportCenter Plus CVE, with AI-written analysis and remediation steps.

Create an account See pricing