← Database

CVE-2021-44077

CRITICAL CVSS: 9.8 Published: 2021-11-29 Modified: 2026-06-17

Description

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.

Affected Platforms

Zohocorp Manageengine Supportcenter PlusZohocorp Manageengine Servicedesk Plus MspZohocorp Manageengine Servicedesk Plus

Weakness Type

CWE-306, CWE-306

References