CVE-2025-3444

Publication date

2025-05-22 10:31:48

Family

Zohocorp

State

PUBLISHED

Description

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.