CVE-2021-31160

HIGH 7.5CVE-2021-31160 · Published 29/06/2021 · updated 17/06/2026

In short

CVE-2021-31160 is a HIGH (CVSS 7.5) vulnerability affecting manageengine servicedesk plus (zohocorp), manageengine servicedesk plus msp (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.2% of all vulnerabilities.
Fix: update to 10.5 or later.

Package	Affected versions	Patched versions
manageengine servicedesk plus zohocorp	`= 10.5`	No fix yet
manageengine servicedesk plus msp zohocorp	`= 10.5< 10.5`	`10.5`

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 10.5

No fix yet

= 10.5< 10.5

10.5

More vulnerabilities in manageengine servicedesk plus

See all →