CVE-2021-31531: Zohocorp ManageEngine ServiceDesk Plus Msp

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

Affected products

• Zohocorp ManageEngine ServiceDesk Plus Msp: before 10.5 (fixed in 10.5); version 10.5 only

Published 2021-06-29. Last modified 2026-06-17.