Filter Bypass Vulnerability in Zoho ManageEngine ADManager Plus
CVE-2021-42002

9.8CRITICAL

Key Information:

Vendor

Zohocorp
Status
Manageengine Admanager Plus
Vendor
CVE Published:
11 November 2021

What is CVE-2021-42002?

The vulnerability in Zoho ManageEngine ADManager Plus prior to version 7115 allows attackers to bypass security filters. This flaw can lead to remote code execution through malicious file uploads, posing a significant risk to system integrity and data security. Users are urged to update their software to mitigate potential exploitation.

References

https://www.manageengine.com/products/ad-manager/release-...
x_refsource_CONFIRM

EPSS Score

12% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.