Admin module Unauthenticated Access Disclosure

The vulnerability of the Admin module component in the software environment for the Zoho ManageEngine ServiceDesk Plus MSP and Zoho ManageEngine SupportCenter Plus configurations relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker operating...

PT-2025-22455 · Zohocorp · Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 Description: The issue concerns an authenticated Local File Inclusion LFI in the Admin module of the software, specifically where help card content is...