CVE-2024-50053: Zohocorp ManageEngine ServiceDesk Plus

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: before 14.9 (fixed in 14.9); version 14.9 only
• Zohocorp ManageEngine ServiceDesk Plus Msp: before 14.9 (fixed in 14.9); version 14.9 only
• Zohocorp ManageEngine Supportcentre Plus: before 14.9 (fixed in 14.9); version 14.9 only

Published 2025-03-21. Last modified 2026-06-17.