Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.manageengine.com/products/service-desk-msp/cve-2025-3444.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Jun 2025, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.9:14910:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:14.9:14900:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14910:*:*:*:*:*:* cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:14.9:14900:*:*:*:*:*:* |
|
| First Time |
Zohocorp
Zohocorp manageengine Supportcenter Plus Zohocorp manageengine Servicedesk Plus Msp |
|
| References | () https://www.manageengine.com/products/service-desk-msp/cve-2025-3444.html - Vendor Advisory |
22 May 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-22 11:15
Updated : 2025-06-17 20:18
NVD link : CVE-2025-3444
Mitre link : CVE-2025-3444
JSON object : View
Products Affected
zohocorp
- manageengine_supportcenter_plus
- manageengine_servicedesk_plus_msp
CWE
No CWE.