CVE-2020-14048

7.5 highEPSS 4.8%

High (7.5) in zohocorp manageengine servicedesk plus. EPSS 4.8% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus before 11.1 build 11115 allows remote unauthenticated attackers to change the installation status of deployed agents.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 4.8% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2020-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zohocorp:manageengine_servicedesk_plus

References

https://gitlab.com/eLeN3Re/CVE-2020-14048
https://www.manageengine.com/products/service-desk/on-premises/readme.html
https://gitlab.com/eLeN3Re/CVE-2020-14048
https://www.manageengine.com/products/service-desk/on-premises/readme.html

Check your stack JSON