← Back

Servicedesk

servicedesk

Vendor: Manageengine • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-11512
1Manageengine
1Servicedesk
May 13, 2026
Nov 8, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker ca...Show more
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the download-snapshot URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.Show less
CVE-2017-11511
1Manageengine
1Servicedesk
May 13, 2026
Nov 8, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker ca...Show more
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files.Show less