Medium severity6.5NVD Advisory· Published May 21, 2019· Updated Jun 17, 2026
CVE-2019-12252
CVE-2019-12252
Description
In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its number to the SDNotify.do?notifyModule=Solution&mode=E-Mail¬ifyTo=SOLFORWARD&id= substring.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*Range: <=10.5
- Zoho/ManageEngine ServiceDesk Plusdescription
- Range: <=10.5
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/153029/Zoho-ManageEngine-ServiceDesk-Plus-Privilege-Escalation.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/108456nvdBroken Link
- www.manageengine.com/products/service-desk/readme.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.