VULNERABILITY INTELLIGENCE

CVE-2025-3444

CVSS score6.5 MEDIUM
EPSS probability1.65%
CISA KEVNot currently listed
Published2025-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.

Weakness classification

  • 0fc0942c-577d-436f-ae8e-945763c79b02: CWE-434

Primary references