Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users.
Affected Platforms
Zohocorp Manageengine Supportcenter PlusZohocorp Manageengine Servicedesk Plus MspZohocorp Manageengine Servicedesk Plus