CVE-2021-31531

CRITICAL 9.8CVE-2021-31531 · Published 29/06/2021 · updated 17/06/2026

In short

CVE-2021-31531 is a CRITICAL (CVSS 9.8) vulnerability affecting manageengine servicedesk plus msp (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.8% of all vulnerabilities.
Fix: update to 10.5 or later.

Package	Affected versions	Patched versions
manageengine servicedesk plus msp zohocorp	`= 10.5< 10.5`	`10.5`

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 10.5< 10.5

10.5

More vulnerabilities in manageengine servicedesk plus msp

See all →