CVE-2021-31530

HIGH

ManageEngine ServiceDesk Plus MSP < 10522 - Information Disclosure

Title source: llm

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.

Core 3

Core References

Various Sources

Third Party Advisory

Release Notes, Vendor Advisory

CVSS v3 7.5

EPSS 0.0447

EPSS Percentile 89.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Status published

Products (2)

zohocorp/manageengine_servicedesk_plus_msp 10.5 (23 CPE variants)

zohocorp/manageengine_servicedesk_plus_msp < 10.5

Published Jun 29, 2021

Tracked Since Feb 18, 2026