CVE-2023-34197: Zohocorp ManageEngine ServiceDesk Plus

Medium severity, CVSS 5.4. EPSS: 3.5% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: before 14.2 (fixed in 14.2); version 14.2 only
• Zohocorp ManageEngine ServiceDesk Plus Msp: before 14.2 (fixed in 14.2); version 14.2 only
• Zohocorp ManageEngine SupportCenter Plus: before 14.2 (fixed in 14.2); version 14.2 only

Published 2023-07-07. Last modified 2026-06-17.