PatchTheCVEmanageengine servicedesk plus msp vulnerabilities and fixes
Recent CVEs affecting manageengine servicedesk plus msp, with upgrade or downgrade steps. 1 tracked.
Also searched as: manageengineservicedeskplusmsp.
manageengine servicedesk plus msp has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-22. Highest priority: CVE-2025-3444 (score 42/100).
- CVE-2025-3444 MEDIUM 6.5 UPGRADE UPGRADE Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authe
FAQ
How do I fix manageengine servicedesk plus msp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is manageengine servicedesk plus msp being exploited right now?
None of the tracked manageengine servicedesk plus msp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which manageengine servicedesk plus msp CVE should I patch first?
CVE-2025-3444 currently ranks highest (42/100): Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authe.