CVE-2021-37415 Zoho ManageEngine ServiceDesk Plus (SDP)
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication
- CVSS
- not scored
On CISA’s exploited list
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
- Added
- 2021-12-01
- Federal patch deadline
- 2021-12-15
- Ransomware use
- not known