Medium (6.5) in zohocorp. EPSS 6.3% chance of exploitation in the next 30 days.
ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
Severity
CVSS 3.1
6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)