Vulnerability Details CVE-2021-31531
Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.075
EPSS Ranking 91.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31531
- https://excellium-services.com/cert-xlm-advisory/cve-2021-31531/
- https://www.manageengine.com/products/service-desk-msp/readme.html#10521
- https://excellium-services.com/cert-xlm-advisory/cve-2021-31531/
- https://www.manageengine.com/products/service-desk-msp/readme.html#10521
Products affected by CVE-2021-31531
-
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:-
-
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:10.5