CVE-2019-15046: Zohocorp ManageEngine ServiceDesk Plus

High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus 10 before 10509 allows unauthenticated sensitive information leakage during Fail Over Service (FOS) replication, aka SD-79989.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: from 10, before 10509 (fixed in 10509)

Published 2019-08-14. Last modified 2026-06-17.