Read the docs

ManageEngine

Records132All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high70CVSS 7.0–8.9

Exploited now

ManageEngine records in CISA KEV

No ManageEngine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Servicedesk Plus 10 records HIGH Applications Manager 8 records MEDIUM Firewall Analyzer 4 records LOW Password Manager Pro 4 records MEDIUM Desktop Central 3 records HIGH Eventlog Analyzer 3 records LOW It360 3 records HIGH Oputils 3 records LOW

Records

3 records in It360 · all components

TI-2014-03259 CVE-2014-3996 · GHSA-9fcv-4956-x8m5

SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop…

Priority MEDIUM 60

SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager Pro (PMP) and Passwo…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.38429 Published 2014-12-05 No fix listed CWE-89
TI-2014-04326 CVE-2014-5302 · GHSA-3qx5-mr88-qhv7

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030…

Priority MEDIUM 51

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.1073 Published 2017-08-28 No fix listed CWE-22
Open these records in search →