Zoho ManageEngine SupportCenter Plus prior to 11016 is vulnerable to an SSRF attack in ActionExecutor.
zohocorp manageengine supportcenter plus 11.0