Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,903CVE records
2,907Published, last 7 days
1,728In CISA KEV
1,439Critical, last 30 days
5,599Analysed
08:17 UTCLast NVD sync
Filters Show:
31 results. Zohocorp Manageengine Supportcenter Plus.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-3444 | Medium | 6.5 |  Zohocorp Manageengine Servicedesk Plus Msp +1 | Unrestricted file upload | — | — | 1.6% | May 22, 2025 |
| CVE-2024-41150 | Medium | 6.1 | Zohocorp Manageengine Servicedesk Plus +2 | Cross-site scripting | — | — | 1.3% | Aug 23, 2024 |
| CVE-2024-38869 | Medium | 5.4 | Zohocorp Manageengine Servicedesk Plus +2 | Incorrect authorization | — | — | 1.1% | Aug 23, 2024 |
| CVE-2024-27314 | Low | 2.4 | Zohocorp Manageengine Servicedesk Plus +2 | Cross-site scripting | — | — | 1.9% | May 27, 2024 |
| CVE-2023-6105 | Medium | 5.5 | Zohocorp Manageengine Analytics Plus +38 | Information exposure | — | 2 refs | 0.69% | Nov 15, 2023 |
| CVE-2023-35785 | High | 8.1 | Zohocorp Manageengine Ad360 +16 | Improper authentication | — | — | 2.4% | Aug 28, 2023 |
| CVE-2023-38331 | Medium | 5.4 | Zohocorp Manageengine Supportcenter Plus | Cross-site scripting | — | — | 2.2% | Jul 28, 2023 |
| CVE-2023-34197 | Medium | 5.4 | Zohocorp Manageengine Servicedesk Plus +2 | Incorrect authorization | — | — | 3.5% | Jul 7, 2023 |
| CVE-2023-29443 | Medium | 4.9 | Zohocorp Manageengine Assetexplorer +3 | XML external entity (XXE) | — | — | 3.0% | Apr 26, 2023 |
| CVE-2023-26601 | High | 7.5 | Zohocorp Manageengine Assetexplorer +3 | Uncontrolled resource consumption | — | — | 34% | Mar 6, 2023 |
| CVE-2023-26600 | Medium | 6.5 | Zohocorp Manageengine Assetexplorer +3 | Improper privilege management | — | — | 6.3% | Mar 6, 2023 |
| CVE-2023-23076 | Critical | 9.8 | Zohocorp Manageengine Supportcenter Plus | OS command injection | — | — | 74% | Feb 1, 2023 |
| CVE-2022-47966 | Critical | 9.8 | Zohocorp Manageengine Access Manager Plus +21 | Improper input validation | Listed · RW | Confirmed | 100% | Jan 18, 2023 |
| CVE-2022-40772 | Medium | 6.5 | Zohocorp Manageengine Servicedesk Plus +3 | — | — | — | 3.2% | Nov 23, 2022 |
| CVE-2022-40771 | Medium | 4.9 | Zohocorp Manageengine Servicedesk Plus +3 | XML external entity (XXE) | — | — | 3.7% | Nov 23, 2022 |
| CVE-2022-40770 | High | 7.2 | Zohocorp Manageengine Servicedesk Plus +2 | Command injection | — | — | 81% | Nov 23, 2022 |
| CVE-2022-42903 | Low | 3.3 | Zohocorp Manageengine Supportcenter Plus | Missing authorization | — | — | 0.51% | Nov 17, 2022 |
| CVE-2022-40773 | High | 8.8 | Zohocorp Manageengine Servicedesk Plus Msp +1 | Improper input validation | — | — | 4.8% | Nov 12, 2022 |
| CVE-2022-36412 | Critical | 9.8 | Zohocorp Manageengine Supportcenter Plus | Improper authentication | — | — | 5.2% | Jul 26, 2022 |
| CVE-2022-35403 | High | 7.5 | Zohocorp Manageengine Servicedesk Plus +3 | — | — | — | 6.2% | Jul 12, 2022 |
