CVE-2019-8394
MEDIUM · CVSS 6.5
Dieksploitasi aktif (CISA KEV) Dipublikasikan 2019-02-17 · diperbarui 2026-06-17
Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.
Detail teknis
- Vector CVSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N- Jenis kelemahan (CWE)
- CWE-434
- Skor EPSS
- 63.34% kemungkinan dieksploitasi dalam 30 hari (persentil 99.2%)