CVE-2021-20081: Zohocorp ManageEngine ServiceDesk Plus

High severity, CVSS 7.2. EPSS: 52.4% chance of exploitation in the next 30 days.

Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.

Affected products

• Zohocorp ManageEngine ServiceDesk Plus: before 11.2 (fixed in 11.2); version 11.2 only

Published 2021-06-10. Last modified 2026-06-17.