Skip to content
Sign in
Not rated

CVE-2021-20081 Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote,…

Description

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.

Affected products and versions

Product Affected versions Fixed in
ManageEngine ServiceDesk Plus Versions not published

Other CVEs of ManageEngine ServiceDesk Plus

The 2 CVEs of ManageEngine ServiceDesk Plus →
CVE-2021-20080 Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer… Not rated
Track this CVE