Known vulnerabilities in Zoho ManageEngine SupportCenter Plus 14001

Vendor: Zoho Corporation

Version: 14001

Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_supportcenter_plus:*:*:*:*:*:*:*:*

Website: https://www.zohocorp.com/index.html

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114229 - Incorrect Regular Expression CVE-2025-8309	CWE-185	Medium	No	No	14940	19.08.2025	SB2025081958 SB2025081959 SB2025081960
#VU107048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-50053	CWE-79	Low	No	No	14910	07.04.2025	SB2025040723
#VU79907 - Cross-Site Request Forgery (CSRF)	CWE-352	Medium	No	No	14304	23.08.2023	SB2023082333
#VU79906 - Information Exposure Through Log Files	CWE-532	Low	No	No	14304	23.08.2023	SB2023082333
#VU79905 - Server-Side Request Forgery (SSRF)	CWE-918	High	No	No	14304	23.08.2023	SB2023082333
#VU79904 - Exposure of sensitive information to an unauthorized actor	CWE-200	Medium	No	No	14304	23.08.2023	SB2023082333
#VU79903 - Improper Authentication	CWE-287	Medium	No	No	14304	23.08.2023	SB2023082333
#VU79902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	CWE-79	Medium	No	No	14304	23.08.2023	SB2023082333
#VU77579 - Security Features CVE-2023-35785	CWE-254	Medium	No	No	14301	21.06.2023	SB2023062103 SB2023062104 SB2023062105 and 4 more