UnscoredCISA KEV

CVE-2021-44077

Zoho — ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus

Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability. Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

CVSSNot scored

EPSS93.3%

Exploit StatusConfirmed (CISA KEV)

PublishedDec 01, 2021

Last ModifiedUndated

VendorZoho

ProductManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus

View on NVD

Vulnerability Timeline

PublishedDec 01, 2021

Added to CISA KEVDec 01, 2021

CISA Remediation DueDec 15, 2021

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a documented actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

More from Zoho in the catalogue.

CVE-2022-28810ManageEnginePublished Mar 07, 2023 CVE-2022-47966ManageEnginePublished Jan 23, 2023 CVE-2022-35405ManageEnginePublished Sep 22, 2022

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a vulnerability matches it.

Explore Seraph CTI Back to Vulnerability Catalogue