Known vulnerabilities in Zoho ManageEngine SupportCenter Plus 14201

Vendor: Zoho Corporation
Software: Zoho ManageEngine SupportCenter Plus
Version: 14201
Software CPE: cpe:2.3:a:zohocorp:zoho_manageengine_supportcenter_plus:*:*:*:*:*:*:*:*
Website: https://www.zohocorp.com/index.html
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Zoho ManageEngine SupportCenter Plus version 14201 Zoho ManageEngine SupportCenter Plus 14201 is affected by 8 vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114229 - Incorrect Regular Expression
CVE-2025-8309		 CWE-185 Medium
No
No
 14940 19.08.2025 SB2025081958
SB2025081959
SB2025081960
#VU107048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-50053		 CWE-79 Low
No
No
 14910 07.04.2025 SB2025040723
#VU79907 - Cross-Site Request Forgery (CSRF)
 CWE-352 Medium
No
No
 14304 23.08.2023 SB2023082333
#VU79906 - Information Exposure Through Log Files
 CWE-532 Low
No
No
 14304 23.08.2023 SB2023082333
#VU79905 - Server-Side Request Forgery (SSRF)
 CWE-918 High
No
No
 14304 23.08.2023 SB2023082333
#VU79904 - Exposure of sensitive information to an unauthorized actor
 CWE-200 Medium
No
No
 14304 23.08.2023 SB2023082333
#VU79903 - Improper Authentication
 CWE-287 Medium
No
No
 14304 23.08.2023 SB2023082333
#VU79902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 14304 23.08.2023 SB2023082333