CVE-2021-31160

HIGH

Zoho ManageEngine ServiceDesk Plus MSP <10521 - Info Disclosure

Title source: llm

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

Core 3

Core References

Various Sources

Broken Link

Release Notes, Vendor Advisory

CVSS v3 7.5

EPSS 0.1002

EPSS Percentile 93.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Status published

Products (3)

zohocorp/manageengine_servicedesk_plus 10.5

zohocorp/manageengine_servicedesk_plus_msp 10.5 10500 (21 CPE variants)

zohocorp/manageengine_servicedesk_plus_msp < 10.5

Published Jun 29, 2021

Tracked Since Feb 18, 2026