6.5Orta
CVE-2025-3444Local File Inclusion
Açıklama
Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.
Zayıflık türü (CWE):
CWE-434
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ManageEngine | ServiceDesk Plus MSP | < 14920 | |
| ManageEngine | SupportCenter Plus | < 14920 | |
| zohocorp | manageengine servicedesk plus msp | ≤ 14.8 | |
| zohocorp | manageengine supportcenter plus | ≤ 14.8 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (6)
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*≤ 14.8cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14900:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14910:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:*≤ 14.8cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.9:14900:*:*:*:*:*:*cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.9:14910:*:*:*:*:*:*