zohocorp manageengine servicedesk plus msp

Name: zohocorp manageengine servicedesk plus msp
Brand: zohocorp

productUS

cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical8high11medium0low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-47966US	critical9.8OT critical	99.8% (100th)	KEV	13.0	2023-01-18	2 versions
CVE-2021-44077US	critical9.8OT critical	93.3% (100th)	KEV	10.5	2021-11-29	2 versions
CVE-2021-31159US	medium5.3	17.8% (97th)	Exploit	no fix	2021-06-16	2 versions
CVE-2022-40770US	high7.2	81.3% (100th)	—	10.6	2022-11-23	2 versions
CVE-2023-26601US	high7.5	34.1% (98th)	—	14.0	2023-03-06	2 versions
CVE-2021-44675US	critical9.8	6.69% (94th)	—	no fix	2021-12-20	2 versions
CVE-2023-26600US	medium6.5	6.31% (94th)	—	13.0	2023-03-06	2 versions
CVE-2022-35403US	high7.5	6.21% (93rd)	—	10.6	2022-07-12	2 versions
CVE-2022-40773US	high8.8	4.96% (92nd)	—	10.6	2022-11-12	2 versions
CVE-2022-40771US	medium4.9	3.71% (90th)	—	13.0	2022-11-23	2 versions
CVE-2022-32551US	high7.5	3.63% (89th)	—	10.6	2022-07-02	2 versions
CVE-2023-34197US	medium5.4OT elevated	3.54% (89th)	—	14.2	2023-07-07	2 versions
CVE-2021-31160US	high7.5	3.52% (89th)	—	10.5	2021-06-29	2 versions
CVE-2022-40772US	medium6.5	3.18% (88th)	—	10.6	2022-11-23	2 versions
CVE-2023-29443US	medium4.9	3.03% (87th)	—	14.0	2023-04-26	2 versions
CVE-2021-31530US	high7.5	2.78% (86th)	—	10.5	2021-06-29	2 versions
CVE-2023-22964US	critical9.1	2.45% (84th)	—	no fix	2023-01-20	2 versions
CVE-2023-35785US	high8.1	2.43% (84th)	—	14.3	2023-08-28	2 versions
CVE-2021-31531US	critical9.8	2.37% (84th)	—	10.5	2021-06-29	2 versions
CVE-2024-27314US	—	1.91% (80th)	—	no fix	2024-05-27	2 versions
CVE-2023-49943US	medium5.4	1.76% (78th)	—	14.5	2024-01-18	2 versions
CVE-2025-3444US	—	1.65% (76th)	—	no fix	2025-05-22	2 versions
CVE-2024-41150US	medium6.1	1.27% (70th)	—	no fix	2024-08-23	2 versions
CVE-2024-50053US	medium5.4	1.15% (67th)	—	14.9	2025-03-21	2 versions
CVE-2024-38869US	medium5.4OT elevated	1.07% (65th)	—	no fix	2024-08-23	2 versions
CVE-2023-6105US	medium5.5	0.69% (53rd)	—	14.3	2023-11-15	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-287Improper Authentication4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan