CVE-2021-37415: Zoho ManageEngine ServiceDesk Authentication Bypass
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability. Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication
- CISA KEV-listed (remediation due 2021-12-15)
- EPSS 92.8% (99.8% percentile)