CVE-2019-8394 — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
CVE-2019-8394: Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Zoho |
| Product | ManageEngine |
| Date added | 2021-11-03 |
| Due date | 2022-05-03 |
| Ransomware campaign use | Unknown |
Description
Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-8394
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-8394
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog