CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
3Exploited in Wild
YesDecision
Descriptions
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.
Zoho ManageEngine ServiceDesk Plus versiones anteriores a 11306, ServiceDesk Plus MSP versiones anteriores a 10530, y SupportCenter Plus versiones anteriores a 11014, son vulnerables a una ejecución de código remota no autenticada. Esto está relacionado con las URLs /RestAPI en un servlet, y con ImportTechnicians en la configuración de Struts
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-20 CVE Reserved
- 2021-11-29 CVE Published
- 2021-12-01 Exploited in Wild
- 2021-12-08 First Exploit
- 2021-12-15 KEV Due Date
- 2024-08-04 CVE Updated
- 2024-10-21 EPSS Updated
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (11)
URL | Date | SRC |
---|---|---|
https://pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerability-in-servicedesk-plus-versions-11138-and-above | 2021-09-16 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11138 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11139 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11140 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11141 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11142 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11143 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11144 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.1 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.1" | 11145 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11200 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11201 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11202 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11203 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11204 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11205 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11206 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11207 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11208 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11209 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11210 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.2 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.2" | 11211 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11300 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11301 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11302 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11303 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11304 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" | 11.3 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus" and version "11.3" | 11305 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | <= 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version " <= 10.5" | - |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10500 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10501 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10502 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10503 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10504 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10505 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10506 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10507 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10508 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10509 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10510 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10511 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10512 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10513 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10514 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10515 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10516 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10517 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10518 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10519 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10520 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10521 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10522 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10523 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10524 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10525 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10526 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10527 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10528 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Servicedesk Plus Msp Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" | 10.5 Search vendor "Zohocorp" for product "Manageengine Servicedesk Plus Msp" and version "10.5" | 10529 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | <= 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version " <= 11.0" | - |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11000 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11001 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11002 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11003 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11004 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11005 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11006 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11007 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11008 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11009 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11010 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11011 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11012 |
Affected
| ||||||
Zohocorp Search vendor "Zohocorp" | Manageengine Supportcenter Plus Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" | 11.0 Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0" | 11013 |
Affected
|