VULNERABILITY INTELLIGENCE

CVE-2021-37415

CVSS score9.8 CRITICAL
EPSS probability99.83%
CISA KEVKnown exploited vulnerability
Published2021-09-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

Vendor / product: Zoho / ManageEngine ServiceDesk Plus (SDP)

Description

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function

Primary references