CVE-2025-3444 — Local File Inclusion

CVE-2025-3444

Local File Inclusion PUBLISHED

Description (CNA)

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.

Affected (CNA)

Vendor / product	Versions
ManageEngine / ServiceDesk Plus MSP	affected 0 before 14920
ManageEngine / SupportCenter Plus	affected 0 before 14920

CWE

CWE-434

References

https://www.manageengine.com/products/service-desk-msp/cve-2025-3444.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.