Arbitrary Code Execution via Directory Traversal in ManageEngine Products

CVE-2014-5302 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authenticated users to execute arbitrary code.

Learn more about our User Device Pen Test.