coldbraid

CVE-2019-8394 Zoho ManageEngine

Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.

CVSS
not scored

CWE-434

On CISA’s exploited list

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known