CVE-2021-20081
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary…
published June 10, 2021
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.
What it is
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.52420 · 99.0th percentile
- Published
- 2021-06-10T11:01Z
EPSS history
Timeline