CVE

CVE-2019-8394

Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability

Zoho · ManageEngine

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.