CVE-2017-9376: Zohocorp ManageEngine ServiceDesk Plus

Medium severity, CVSS 6.5. EPSS: 6.7% chance of exploitation in the next 30 days.

ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: before 9.3 (fixed in 9.3)

Published 2019-03-25. Last modified 2026-06-17.