ManageEngine SupportCenter Plus vulnerabilities

2 CVEs affecting ManageEngine SupportCenter Plus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8309, published 2025-08-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1432, published 2008-03-20. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus 7.0.0 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, a…
CVE-2025-8309, published 2025-08-20. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This…