Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-3444

Local File Inclusion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zohocorp

Description

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ManageEngine ServiceDesk Plus MSP

Default version status: unaffected

  • 0 to < 14920affected

ManageEngine SupportCenter Plus

Default version status: unaffected

  • 0 to < 14920affected

References