How many zohocorp manageengine servicedesk plus CVEs are in CISA KEV?

Yes — 4 of zohocorp manageengine servicedesk plus's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of zohocorp manageengine servicedesk plus are affected?

54 distinct zohocorp manageengine servicedesk plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zohocorp manageengine servicedesk plus CVEs?

zohocorp manageengine servicedesk plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-306 (Missing Authentication for Critical Function), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-863 (Incorrect Authorization).

What is the average severity of zohocorp manageengine servicedesk plus CVEs?

The average CVSS base score across zohocorp manageengine servicedesk plus's scored CVEs is 6.7.

zohocorp manageengine servicedesk plus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: zohocorp manageengine servicedesk plus vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

zohocorp manageengine servicedesk plus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

zohocorp manageengine servicedesk plus has 50 published CVE records since 2018, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 6.7. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of zohocorp manageengine servicedesk plus's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High13

Medium31

Low1

In CISA’s Known Exploited Vulnerabilities catalog

4 of zohocorp manageengine servicedesk plus's CVEs are confirmed exploited in the wild.

Public exploits

25 of zohocorp manageengine servicedesk plus's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every zohocorp manageengine servicedesk plus version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

9.3 <= v <= 9.310 CVEs
11.1 <= v <= 11.17 CVEs
10.0.0 <= v <= 10.0.06 CVEs
10.5 <= v <= 10.56 CVEs
14.0 <= v <= 14.06 CVEs
11.0 <= v <= 11.04 CVEs
11.2 <= v <= 11.24 CVEs
11.3 <= v <= 11.34 CVEs
13.0 <= v <= 13.04 CVEs
< 14.03 CVEs
< 14.13 CVEs
14.1 <= v <= 14.1

Common weakness types

The CWE weakness categories most often found in zohocorp manageengine servicedesk plus CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many zohocorp manageengine servicedesk plus CVEs were published each year.

2018

2019

2020

2021

2022

2023

2024

Other zohocorp products

Browse vulnerabilities for other products by zohocorp.

manageengine opmanager70 CVEs manageengine applications manager63 CVEs manageengine adselfservice plus57 CVEs manageengine adaudit plus54 CVEs manageengine admanager plus53 CVEs manageengine desktop central48 CVEs manageengine supportcenter plus31 CVEs

Frequently asked questions

Common questions about zohocorp manageengine servicedesk plus vulnerabilities.

How many CVEs does zohocorp manageengine servicedesk plus have?: zohocorp manageengine servicedesk plus has 50 published CVE records since 2018.
How many zohocorp manageengine servicedesk plus CVEs are in CISA KEV?: Yes — 4 of zohocorp manageengine servicedesk plus's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for zohocorp manageengine servicedesk plus vulnerabilities?: Yes — 25 of zohocorp manageengine servicedesk plus's CVEs have a known public exploit.
Which versions of zohocorp manageengine servicedesk plus are affected?: 54 distinct zohocorp manageengine servicedesk plus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in zohocorp manageengine servicedesk plus CVEs?: zohocorp manageengine servicedesk plus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-306 (Missing Authentication for Critical Function), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-863 (Incorrect Authorization).
How many critical zohocorp manageengine servicedesk plus vulnerabilities are there?: zohocorp manageengine servicedesk plus has 5 critical and 13 high-severity CVEs.
What is the average severity of zohocorp manageengine servicedesk plus CVEs?: The average CVSS base score across zohocorp manageengine servicedesk plus's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track zohocorp manageengine servicedesk plus vulnerabilities

Get an alert for each new zohocorp manageengine servicedesk plus CVE, with AI-written analysis and remediation steps.

Create an account See pricing

zohocorp manageengine servicedesk plus Vulnerabilities