Zoho (ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus) Data Breach

Zoho (ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus) experienced a data breach that was reported on December 1, 2021. Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

Key Facts

Organization
Zoho (ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus)
Date Reported
December 1, 2021
Incident Type
web app exploit
Industry
Technology
Severity Score
5/10
Confidence Level
high
Tags
web app exploit

Source

View original source - External link to primary source documentation

Understanding web app exploit Incidents

Web application exploits target vulnerabilities in websites and APIs. Secure development practices, WAFs, and penetration testing protect against these attacks.