VYPR
← All advisories
High severity7.2NVD Advisory· Published Jun 10, 2021· Updated Jun 17, 2026

CVE-2021-20081

CVE-2021-20081

Description

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Zohocorp/Manageengine Servicedesk Plus6 versions
    cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*range: <11.2
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:-:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:build11201:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:build11202:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:build11203:*:*:*:*:*:*
    • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.2:build11204:*:*:*:*:*:*
  • ManageEngine/ServiceDesk Plusdescription
  • Manageengine/Servicedesk Plusllm-fuzzy
    Range: <11205

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.