CVE-2011-2756: ManageEngine ServiceDesk Plus

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors.

Affected products

• ManageEngine ServiceDesk Plus: version 8.0 only

Published 2011-07-17. Last modified 2026-06-16.