// For flags

CVE-2021-44077

Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

3
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.

Zoho ManageEngine ServiceDesk Plus versiones anteriores a 11306, ServiceDesk Plus MSP versiones anteriores a 10530, y SupportCenter Plus versiones anteriores a 11014, son vulnerables a una ejecución de código remota no autenticada. Esto está relacionado con las URLs /RestAPI en un servlet, y con ImportTechnicians en la configuración de Struts

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-11-20 CVE Reserved
  • 2021-11-29 CVE Published
  • 2021-12-01 Exploited in Wild
  • 2021-12-08 First Exploit
  • 2021-12-15 KEV Due Date
  • 2024-08-04 CVE Updated
  • 2024-10-21 EPSS Updated
CWE
  • CWE-306: Missing Authentication for Critical Function
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11138
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11139
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11140
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11141
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11142
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11143
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11144
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.1
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1"
11145
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11200
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11201
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11202
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11203
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11204
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11205
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11206
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11207
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11208
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11209
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11210
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.2
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2"
11211
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11300
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11301
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11302
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11303
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11304
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus"
11.3
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3"
11305
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
<= 10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version " <= 10.5"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10500
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10501
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10502
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10503
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10504
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10505
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10506
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10507
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10508
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10509
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10510
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10511
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10512
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10513
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10514
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10515
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10516
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10517
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10518
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10519
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10520
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10521
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10522
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10523
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10524
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10525
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10526
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10527
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10528
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Servicedesk Plus Msp
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp"
10.5
Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5"
10529
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
<= 11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version " <= 11.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11000
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11003
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11004
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11005
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11006
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11007
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11008
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11009
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11010
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11011
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11012
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11013
Affected