CVE-2021-44675

CRITICAL 9.8CVE-2021-44675 · Published 20/12/2021 · updated 17/06/2026

In short

CVE-2021-44675 is a CRITICAL (CVSS 9.8) vulnerability affecting manageengine servicedesk plus msp (zohocorp).
Chance of exploitation in the next 30 days (EPSS): 6.7%, higher than 93.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
manageengine servicedesk plus msp zohocorp	`= 10.5≤ 10.5`	No fix yet

Description

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

References

pitstop.manageengine.com/portal/en/community/topic/security-advisory-authentication-bypass-vulnerabilities-in-servicedesk-plus-msp-that-could-lead-to-remote-code-execution · Vendor Advisory

More vulnerabilities in manageengine servicedesk plus msp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

manageengine servicedesk plus msp

zohocorp

= 10.5≤ 10.5

No fix yet

More vulnerabilities in manageengine servicedesk plus msp

See all →