CVE-2021-44077

Published: Nov 29, 2021Modified: Oct 31, 2025CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechnicians in the Struts configuration.

Affected (73)

Products: Zohocorp: Manageengine Servicedesk Plus, Manageengine Servicedesk Plus Msp, Manageengine Supportcenter Plus

Zohocorp

3 products

Manageengine Servicedesk Plus

Manageengine Servicedesk Plus Msp

Manageengine Supportcenter Plus

Configuration A

73 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Servicedesk Plus	Before 11.1
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11138
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11139
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11140
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11141
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11142
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11143
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11144
Zohocorp Manageengine Servicedesk Plus	Version 11.1 11145
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11200
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11201
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11202
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11203
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11204
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11205
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11206
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11207
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11208
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11209
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11210
Zohocorp Manageengine Servicedesk Plus	Version 11.2 11211
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11300
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11301
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11302
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11303
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11304
Zohocorp Manageengine Servicedesk Plus	Version 11.3 11305
Zohocorp Manageengine Servicedesk Plus Msp	Before 10.5
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10500
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10501
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10502
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10503
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10504
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10505
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10506
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10507
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10508
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10509
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10510
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10511
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10512
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10513
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10514
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10515
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10516
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10517
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10518
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10519
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10520
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10521
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10522
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10523
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10524
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10525
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10526
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10527
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10528
Zohocorp Manageengine Servicedesk Plus Msp	Version 10.5 10529
Zohocorp Manageengine Supportcenter Plus	Before 11.0
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11000
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11001
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11002
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11003
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11004
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11005
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11006
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11007
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11008
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11009
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11010
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11011
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11012
Zohocorp Manageengine Supportcenter Plus	Version 11.0 11013