CVE-2019-8394

Published: Feb 17, 2019Modified: Nov 7, 2025CISA KEV

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

Products: Zohocorp: Manageengine Servicedesk Plus

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus	Before 10.0.0
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10000
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10001
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10002
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10003
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10004
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10005
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10006
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10007
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10008
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10009
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10010
Zohocorp Manageengine Servicedesk Plus	Version 10.0.0 10011