Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Very High
CVE-2021-44077
Disclosure Date: November 29, 2021 (last updated October 07, 2023)
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.
3
Attacker Value
Unknown
CVE-2021-44526
Disclosure Date: December 23, 2021 (last updated October 07, 2023)
Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations.
0
Attacker Value
Unknown
CVE-2021-37415
Disclosure Date: September 01, 2021 (last updated February 23, 2025)
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
0
Attacker Value
Unknown
CVE-2021-20081
Disclosure Date: June 10, 2021 (last updated February 22, 2025)
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
0
