First published: Mon Dec 20 2021(Updated: )
Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | <=10.5 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10500 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10501 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10502 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10503 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10504 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10505 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10506 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10507 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10508 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10509 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10510 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10511 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10512 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10513 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10514 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10515 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10516 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10517 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10518 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10519 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10520 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10521 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10522 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10523 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10524 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10525 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10526 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10527 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10528 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10529 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10530 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10531 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10532 | |
Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | =10.5-10533 | |
Zohocorp Manageengine Servicedesk Plus Msp | <=10.5 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10500 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10501 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10502 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10503 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10504 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10505 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10506 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10507 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10508 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10509 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10510 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10511 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10512 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10513 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10514 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10515 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10516 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10517 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10518 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10519 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10520 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10521 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10522 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10523 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10524 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10525 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10526 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10527 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10528 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10529 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10530 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10531 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10532 | |
Zohocorp Manageengine Servicedesk Plus Msp | =10.5-10533 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2021-44675.
The severity of CVE-2021-44675 is critical with a CVSS score of 9.8.
Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is affected by CVE-2021-44675.
No, authentication is not required for exploitation of CVE-2021-44675.
To fix CVE-2021-44675, update Zoho ManageEngine ServiceDesk Plus MSP to version 10.5 Build 10534 or later.