Zoho Corp Servicedesk Plus
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Zoho Corp Servicedesk Plus.
By the Year
In 2026 there have been 1 vulnerability in Zoho Corp Servicedesk Plus with an average score of 9.1 out of ten. Servicedesk Plus did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 9.10 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 1 | 8.80 |
It may take a day or so for new Servicedesk Plus vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Zoho Corp Servicedesk Plus Security Vulnerabilities
Authenticated RCE in ManageEngine AssetExplorer/ServiceDesk Plus Reports
CVE-2026-12507
9.1 - Critical
- November 12, 2026
Zohocorp ManageEngine AssetExplorer versions below 7860, ServiceDesk Plus versions below 15290, ServiceDesk Plus MSP versions below 15150, and SupportCenter Plus versions below 15150 are affected by a authenticated remote code execution vulnerability in the Reports module. An authenticated user with the Create Query Reports permission could exploit specially crafted database queries to execute arbitrary commands on the underlying server.
SQL Injection
Zoho ManageEngine ServiceDesk 9.3
CVE-2019-10008
8.8 - High
- April 24, 2019
Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrator session when the guest user enters the administrator username, with an arbitrary incorrect password, in an mc/ login attempt within a different browser tab.
Session Fixation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Zoho Corp Servicedesk Plus or by Zoho Corp? Click the Watch button to subscribe.
