Zoho Vulnerabilities and Affected Products
Vulnerabilities associated with ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus.
Products
Clear product- ManageEngine6 vulnerabilities
- manageengine_opmanager3 vulnerabilities
- ManageEngine ServiceDesk2 vulnerabilities
- campaigns1 vulnerability
- Desktop Central1 vulnerability
- firewall_analyzer1 vulnerability
- ManageEngine ServiceDesk Plus (SDP)1 vulnerability
- ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus1 vulnerability
- manageengine_access_manager_plus1 vulnerability
- manageengine_adaudit_plus1 vulnerability
- manageengine_admanager_plus1 vulnerability
- manageengine_adselfservice_plus1 vulnerability
- manageengine_firewall_analyzer1 vulnerability
- Password Manager Pro (PMP)1 vulnerability
- Zoho CRM Lead Magnet1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-44077CRITICAL | Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityZoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration. | CVSS9.8v3.1 | EPSS93.3% | PoCs3 | SignalsListed in CISA KEVNo known ransomware use1 Nuclei template | STIX |