Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus
Date added (CISA)
2021-12-01
Remediation due
2021-12-15
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution