CVE-2021-37415

CRITICAL CVSS: 9.8 Published: 2021-09-01 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.

Affected Platforms

Zohocorp Manageengine Servicedesk Plus

Weakness Type

CWE-306, CWE-306

References