CVE-2015-1479

MEDIUM 6.5CVE-2015-1479 · Published 04/02/2015 · updated 17/06/2026

In short

CVE-2015-1479 is a MEDIUM (CVSS 6.5) vulnerability affecting servicedesk plus (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
servicedesk plus zohocorp	`≤ 9.0`	No fix yet

Description

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter.

References

packetstormsecurity.com/files/130079/ManageEngine-ServiceDesk-9.0-SQL-Injection.html · Exploit
exploit-db.com/exploits/35890 · Exploit
manageengine.com/products/service-desk/readme-9.0.html · Vendor Advisory
rewterz.com/vulnerabilities/manageengine-servicedesk-sql-injection-vulnerability · Exploit
securityfocus.com/bid/72299 · Exploit

More vulnerabilities in servicedesk plus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free