AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2021-37415.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSCISA known exploitedAdded Dec 01, 2021
RECORD STATUSAwaiting NVD dataModified Dec 01, 2021

Disclosure summary

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

CISA remediation guidance

Apply updates per vendor instructions.

Original records & references

PUBLISHED 2021-12-01T00:00:00-05:00
MODIFIED 2021-12-01T00:00:00-05:00
INGESTED 2026-10-06T11:42:59-04:00