Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2024-50053

Zohocorp ManageEngine ServiceDesk Plus versions below 14920 , ServiceDesk Plus MSP and SupportCentre Plus versions below 14910 are vulnerable to Stored XSS in the task feature.

Published: Mar 21, 2025
Updated: Nov 16, 2025
CVE: CVE-2024-50053
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.3
AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
zohocorp / manageengine_servicedesk_plus	14.9-14910	14.9-14910.x
zohocorp / manageengine_servicedesk_plus_msp	-	14.9
zohocorp / manageengine_servicedesk_plus_msp	14.9-14900	14.9-14900.x
zohocorp / manageengine_supportcentre_plus	-	14.9
zohocorp / manageengine_supportcentre_plus	14.9-14900	14.9-14900.x
zohocorp / manageengine_servicedesk_plus	-	14.9
zohocorp / manageengine_servicedesk_plus	14.9	14.9.x

https://www.manageengine.com/products/service-desk/CVE-2024-50053.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo