← All advisories

Unrated severityCISA KEVNVD Advisory· Published Sep 1, 2021· Updated Oct 21, 2025

CVE-2021-37415

CVE-2021-37415

Description

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Zoho/ManageEngine ServiceDesk Plusdescription
Zohocorp/ManageEngine ServiceDesk Plus MSPllm-fuzzy
Range: <11302

Patches

Vulnerability mechanics

References

2

www.manageengine.commitrex_refsource_MISC
www.manageengine.com/products/service-desk/on-premises/readme.htmlmitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.