CVE-2021-44675

—

CVSS 3.1

9.8 critical

EPSS

6%p93

Published

Dec 20, 2021 (Dec 20, 2021)

Modified

Jun 17, 2026

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

Vendors: zohocorp
Products: manageengine servicedesk plus msp
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.5%)

In the news0 stories

No ingested article mentions this CVE yet.