Unrestricted Upload of File with Dangerous Type

Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

CVE-2019-8394

please upgrade Zoho ManageEngine ServiceDesk Plus (SDP) to the latest build here:  https://www.manageengine.com/products/service-desk/on-premises/readme.html

<p>please upgrade Zoho ManageEngine ServiceDesk Plus (SDP) to the latest build here:  <a href="https://www.manageengine.com/products/service-desk/on-premises/readme.html">https://www.manageengine.com/products/service-desk/on-premises/readme.html</a></p>


upgrade Zoho ManageEngine ServiceDesk Plus (SDP) above 10.0 build 10012

Featured CVEs

Feed of the featured CVEs from Vulcan Remedy Cloud.

Vulcan Remedy Cloud - Featured CVEs

Thank you for downloading from Remedy Cloud!

Please fill out the form to download the CSV

Your Script is On It's Way!

Tell us where to send the script

Your Email Was Successfully Sent!

Email

Your Name

Your fix has been sent successfully!

Suggest a Fix

Search for a CVE below to see all the available fixes

Remedy Cloud

Loading - Vulcan Remedy Cloud

The page you are looking for was moved, removed, renamed or might never existed.

CVE-2019-8394

1 fix found:

Workaround

upgrade Zoho ManageEngine ServiceDesk Plus (SDP) above 10.0 build 10012