CVE-2017-9376

MEDIUM

ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.

Affects 1 product across 1 vendor.

CVSS 3.06.5
EPSS6.7%
Percentile94th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, no integrity impact, no availability impact.
CWE Weakness Definitions
CWE-20: Improper Input Validation

Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.

Related Attack Patterns (CAPEC)
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
via CWE-20
CAPEC-7 Blind SQL Injection
via CWE-20
CAPEC-8 Buffer Overflow in an API Call
via CWE-20
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-20
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-20
Show all 51
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2019. A medium severity vulnerability affects Zohocorp systems (CVE-2017-9376). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2019-GLOBAL-121846-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2017-9376?
This vulnerability was disclosed in 2019. A medium severity vulnerability affects Zohocorp systems (CVE-2017-9376). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2017-9376?
CVE-2017-9376 has CVSS 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS: 6.7%.
Is CVE-2017-9376 actively exploited?
No confirmed active exploitation of CVE-2017-9376 as of 2026-05-30.
How do I remediate CVE-2017-9376?
Priority: MONITOR. PSIRT: [email protected]
What systems are affected by CVE-2017-9376?
CVE-2017-9376 affects Zohocorp Manageengine Servicedesk Plus.
Vulnerability Details
CVE IDCVE-2017-9376
BSIDBS-2019-GLOBAL-121846-M BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published2019-03-25
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
Improper Input Validation
SourceNVD
Official Description

ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: ManageEngine ServiceDesk Plus before 9314 contains a local file inclusion vulnerability in the defModule parameter in DefaultConfigDef.do and AssetDefaultConfigDef.do. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Zohocorp Manageengine Servicedesk Plus < 9.3
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2761 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash7a08c3a69db70a349114cc785f9881e140541165ffae2d2e3f416b17df3458b9cfab40f3c5c1c329213d7450b9b5587ac0f98291764a7e96e9710b7b67ad9f6c
Related CVEs affecting Zohocorp
CVE-2019-3905 10.0 Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF. CVE-2026-6516 10.0 Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unaut... CVE-2014-9371 10.0 The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows ... CVE-2017-7213 10.0 Zoho ManageEngine Desktop Central before build 100082 allows remote attackers... CVE-2026-86708 10.0 ZohoCorp ManageEngine Applications Manager versions 182200 and below were vul...
View all Zohocorp CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →