Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2021-31159

🗓️ 16 Jun 2021 12:51:13Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 122 Views🌐 WEB

Zoho ManageEngine SDP MSP before 10519 User Enumeration vulnerabilit

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Generation of Error Message Containing Sensitive Information in Zohocorp Manageengine_Servicedesk_Plus_Msp
19 Mar 202118:28
–githubexploit
zdt
zdt		Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration Exploit
17 Jun 202100:00
–zdt
attackerkb
ATTACKERKB		CVE-2021-31159
16 Jun 202113:15
–attackerkb
circl
Circl		CVE-2021-31159
18 Jun 202102:55
–circl
cnnvd
CNNVD		Zoho ManageEngine ServiceDesk Plus MSP 安全漏洞
16 Jun 202100:00
–cnnvd
cvelist
Cvelist		CVE-2021-31159
16 Jun 202112:51
–cvelist
exploitdb
Exploit DB		Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration
17 Jun 202100:00
–exploitdb
kitploit
Kitploit		CVE-2021-31159
1 Sep 202621:29
–kitploit
nvd
NVD		CVE-2021-31159
16 Jun 202113:15
–nvd
osv
OSV		CVE-2021-31159
16 Jun 202113:15
–osv
Rows per page
NVD
Node
OR
zohocorpmanageengine_servicedesk_plus_mspRange8.0–9.4
zohocorpmanageengine_servicedesk_plus_mspMatch10.510500
zohocorpmanageengine_servicedesk_plus_mspMatch10.510501
zohocorpmanageengine_servicedesk_plus_mspMatch10.510502
zohocorpmanageengine_servicedesk_plus_mspMatch10.510503
zohocorpmanageengine_servicedesk_plus_mspMatch10.510504
zohocorpmanageengine_servicedesk_plus_mspMatch10.510505
zohocorpmanageengine_servicedesk_plus_mspMatch10.510506
zohocorpmanageengine_servicedesk_plus_mspMatch10.510507
zohocorpmanageengine_servicedesk_plus_mspMatch10.510508
zohocorpmanageengine_servicedesk_plus_mspMatch10.510509
zohocorpmanageengine_servicedesk_plus_mspMatch10.510510
zohocorpmanageengine_servicedesk_plus_mspMatch10.510511
zohocorpmanageengine_servicedesk_plus_mspMatch10.510512
zohocorpmanageengine_servicedesk_plus_mspMatch10.510513
zohocorpmanageengine_servicedesk_plus_mspMatch10.510514
zohocorpmanageengine_servicedesk_plus_mspMatch10.510515
zohocorpmanageengine_servicedesk_plus_mspMatch10.510516
zohocorpmanageengine_servicedesk_plus_mspMatch10.510517
zohocorpmanageengine_servicedesk_plus_mspMatch10.510518
zohocorpmanageengine_servicedesk_plus_mspMatch10.58000
zohocorpmanageengine_servicedesk_plus_mspMatch10.58001
zohocorpmanageengine_servicedesk_plus_mspMatch10.58002
zohocorpmanageengine_servicedesk_plus_mspMatch10.58003
zohocorpmanageengine_servicedesk_plus_mspMatch10.58004
zohocorpmanageengine_servicedesk_plus_mspMatch10.58100
zohocorpmanageengine_servicedesk_plus_mspMatch10.58101
zohocorpmanageengine_servicedesk_plus_mspMatch10.58102
zohocorpmanageengine_servicedesk_plus_mspMatch10.58103
zohocorpmanageengine_servicedesk_plus_mspMatch10.58104
zohocorpmanageengine_servicedesk_plus_mspMatch10.58105
zohocorpmanageengine_servicedesk_plus_mspMatch10.58200
zohocorpmanageengine_servicedesk_plus_mspMatch10.58201
zohocorpmanageengine_servicedesk_plus_mspMatch10.58202
zohocorpmanageengine_servicedesk_plus_mspMatch10.58203
zohocorpmanageengine_servicedesk_plus_mspMatch10.58204
zohocorpmanageengine_servicedesk_plus_mspMatch10.58205
zohocorpmanageengine_servicedesk_plus_mspMatch10.58206
zohocorpmanageengine_servicedesk_plus_mspMatch10.58207
zohocorpmanageengine_servicedesk_plus_mspMatch10.58208
zohocorpmanageengine_servicedesk_plus_mspMatch10.58209
zohocorpmanageengine_servicedesk_plus_mspMatch10.58210
zohocorpmanageengine_servicedesk_plus_mspMatch10.58211
zohocorpmanageengine_servicedesk_plus_mspMatch10.58300
zohocorpmanageengine_servicedesk_plus_mspMatch10.58301
zohocorpmanageengine_servicedesk_plus_mspMatch10.58302
zohocorpmanageengine_servicedesk_plus_mspMatch10.58303
zohocorpmanageengine_servicedesk_plus_mspMatch10.58304
zohocorpmanageengine_servicedesk_plus_mspMatch10.58305
zohocorpmanageengine_servicedesk_plus_mspMatch10.58306
zohocorpmanageengine_servicedesk_plus_mspMatch10.58307
zohocorpmanageengine_servicedesk_plus_mspMatch10.58308
zohocorpmanageengine_servicedesk_plus_mspMatch10.58309
zohocorpmanageengine_servicedesk_plus_mspMatch10.58310
zohocorpmanageengine_servicedesk_plus_mspMatch10.58311
zohocorpmanageengine_servicedesk_plus_mspMatch10.58312
zohocorpmanageengine_servicedesk_plus_mspMatch10.59000
zohocorpmanageengine_servicedesk_plus_mspMatch10.59001
zohocorpmanageengine_servicedesk_plus_mspMatch10.59002
zohocorpmanageengine_servicedesk_plus_mspMatch10.59003
zohocorpmanageengine_servicedesk_plus_mspMatch10.59004
zohocorpmanageengine_servicedesk_plus_mspMatch10.59005
zohocorpmanageengine_servicedesk_plus_mspMatch10.59006
zohocorpmanageengine_servicedesk_plus_mspMatch10.59007
zohocorpmanageengine_servicedesk_plus_mspMatch10.59008
zohocorpmanageengine_servicedesk_plus_mspMatch10.59009
zohocorpmanageengine_servicedesk_plus_mspMatch10.59201
zohocorpmanageengine_servicedesk_plus_mspMatch10.59203
zohocorpmanageengine_servicedesk_plus_mspMatch10.59204
zohocorpmanageengine_servicedesk_plus_mspMatch10.59205
zohocorpmanageengine_servicedesk_plus_mspMatch10.59206
zohocorpmanageengine_servicedesk_plus_mspMatch10.59207
zohocorpmanageengine_servicedesk_plus_mspMatch10.59208
zohocorpmanageengine_servicedesk_plus_mspMatch10.59209
zohocorpmanageengine_servicedesk_plus_mspMatch10.59210
zohocorpmanageengine_servicedesk_plus_mspMatch10.59300
zohocorpmanageengine_servicedesk_plus_mspMatch10.59301
zohocorpmanageengine_servicedesk_plus_mspMatch10.59302
zohocorpmanageengine_servicedesk_plus_mspMatch10.59303
zohocorpmanageengine_servicedesk_plus_mspMatch10.59304
zohocorpmanageengine_servicedesk_plus_mspMatch10.59305
zohocorpmanageengine_servicedesk_plus_mspMatch10.59306
zohocorpmanageengine_servicedesk_plus_mspMatch10.59307
zohocorpmanageengine_servicedesk_plus_mspMatch10.59308
zohocorpmanageengine_servicedesk_plus_mspMatch10.59400
zohocorpmanageengine_servicedesk_plus_mspMatch10.59401
zohocorpmanageengine_servicedesk_plus_mspMatch10.59402
zohocorpmanageengine_servicedesk_plus_mspMatch10.59403
zohocorpmanageengine_servicedesk_plus_mspMatch10.59404
zohocorpmanageengine_servicedesk_plus_mspMatch10.59405
zohocorpmanageengine_servicedesk_plus_mspMatch10.59406
zohocorpmanageengine_servicedesk_plus_mspMatch10.59407
zohocorpmanageengine_servicedesk_plus_mspMatch10.59408
zohocorpmanageengine_servicedesk_plus_mspMatch10.59409
zohocorpmanageengine_servicedesk_plus_mspMatch10.59410
zohocorpmanageengine_servicedesk_plus_mspMatch10.59411
zohocorpmanageengine_servicedesk_plus_mspMatch10.59412
zohocorpmanageengine_servicedesk_plus_mspMatch10.59413
zohocorpmanageengine_servicedesk_plus_mspMatch10.59414
zohocorpmanageengine_servicedesk_plus_mspMatch10.59415
zohocorpmanageengine_servicedesk_plus_mspMatch10.59416
zohocorpmanageengine_servicedesk_plus_mspMatch10.59417
zohocorpmanageengine_servicedesk_plus_mspMatch10.59418
zohocorpmanageengine_servicedesk_plus_mspMatch10.59419
zohocorpmanageengine_servicedesk_plus_mspMatch10.59420
zohocorpmanageengine_servicedesk_plus_mspMatch10.59421
zohocorpmanageengine_servicedesk_plus_mspMatch10.59422
zohocorpmanageengine_servicedesk_plus_mspMatch10.59423
zohocorpmanageengine_servicedesk_plus_mspMatch10.59424
zohocorpmanageengine_servicedesk_plus_mspMatch10.59425
zohocorpmanageengine_servicedesk_plus_mspMatch10.59426
zohocorpmanageengine_servicedesk_plus_mspMatch10.59427
ParameterPositionPathDescriptionCWE
userNamequery param/ForgotPassword.sdUser Enumeration via error-message-based response size differences in ForgotPassword endpointCWE-209
dnamequery param/ForgotPassword.sdUser Enumeration via error-message-based response size differences in ForgotPassword endpointCWE-209

CVE-2021-31159 Zoho ManageEngine ServiceDesk Plus MSP 9.4 用戶枚舉漏洞

NEW: CVE-2021-31159 Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732. Severity: MEDIUM https://t.co/kqU9Jirh0W?amp=1

NEW: CVE-2021-31159 Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732. Severity: [object Object] https://t.co/kqU9Jirh0W?amp=1

NEW: CVE-2021-31159 Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732. Severity: [object Object] https://t.co/kqU9Jirh0W?amp=1

I appreciate the response, this is the exact issue I am having. What gives you the right to say what I just posted is not a vulnerability? CVE-2021-31159 You are making your own rules when there are ref to this EVERYWHERE. WE NEED TO STOP THIS SELF-RIGHTEOUS #INFOSEC MOVEMENT

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 03:51Current
5.1Medium risk
Vulners AI Score5.1
CVSS 25
CVSS 3.15.3
EPSS0.17772
CWE-209
cve-2021-31159zohomanageengineservicedesk plusmspuser enumerationvulnerabilitysdpmsp-15732nvd
122