CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-31531

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0710%
EPSS Percentile43.20th
Published2021年6月29日
Last Modified2025年5月30日

Vulnerability Description

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

Affected Platforms (CPE)

📦
Zohocorp

Manageengine Servicedesk Plus Msp

< 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5
📦
Zohocorp

Manageengine Servicedesk Plus Msp

= 10.5

References & Advisories

🔗 https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31531
🔗 https://excellium-services.com/cert-xlm-advisory/cve-2021-31531/
🔗 https://www.manageengine.com/products/service-desk-msp/readme.html#10521
🔗 https://excellium-services.com/cert-xlm-advisory/cve-2021-31531/
🔗 https://www.manageengine.com/products/service-desk-msp/readme.html#10521

関連する脆弱性情報

CVE-2021-440779.8

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulner...

CVE-2021-446759.8

Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a fil...

CVE-2021-311607.5

Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.

CVE-2021-315307.5

Zoho ManageEngine ServiceDesk Plus MSP before 10522 is vulnerable to Information Disclosure.