Vulnerability · Published Jun 10, 2021 · Assigned by tenable
CVE-2021-20081
High 7.2
In plain English
A high-severity security flaw in ManageEngine ServiceDesk Plus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 52.4% (higher than 99% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)52.4%top 1.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ManageEngine ServiceDesk Plus | Before 11205 |
References
- https://www.tenable.com/security/research/tra-2021-22 x_refsource_MISC