# Zohocorp Manageengine Servicedesk Plus


- [CVE-2022-47966](https://insights.sbomify.com/CVE-2022-47966/): Zoho ManageEngine Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-44077](https://insights.sbomify.com/CVE-2021-44077/): Zoho ManageEngine ServiceDesk Plus Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-37415](https://insights.sbomify.com/CVE-2021-37415/): Zoho ManageEngine ServiceDesk Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2019-8394](https://insights.sbomify.com/CVE-2019-8394/): Zoho ManageEngine ServiceDesk Plus (SDP) File Upload (high 7.5, exploited in the wild)
- [CVE-2021-44526](https://insights.sbomify.com/CVE-2021-44526/): Auth bypass in n/a (critical 9.8)
- [CVE-2019-8395](https://insights.sbomify.com/CVE-2019-8395/): Path traversal in n/a (critical 9.8)
- [CVE-2020-35682](https://insights.sbomify.com/CVE-2020-35682/): Auth bypass in n/a (high 8.8)
- [CVE-2017-9362](https://insights.sbomify.com/CVE-2017-9362/): XML external entity in n/a (high 8.8)
- [CVE-2024-38869](https://insights.sbomify.com/CVE-2024-38869/): Incorrect Authorization (high 8.3)
- [CVE-2023-35785](https://insights.sbomify.com/CVE-2023-35785/): Auth bypass in n/a (high 8.1)
- [CVE-2019-12133](https://insights.sbomify.com/CVE-2019-12133/): Privilege escalation in n/a (high 7.8)
- [CVE-2023-26601](https://insights.sbomify.com/CVE-2023-26601/): Denial of service in n/a (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/zohocorp/manageengine-servicedesk-plus/