Share:

CVE-2021-20081 - Zohocorp Manageengine Servicedesk Plus

June 10, 2021

Critical 7.2

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.

Affected software

Zohocorp Manageengine Servicedesk Plus

Reference links

https://www.tenable.com/security/research/tra-2021-22

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.