CVE-2021-28958 Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
CriticalCVSS 9.8
EPSS 73.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4510 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4511 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4520 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4522 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4531 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4540 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4543 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4544 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4550 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4560 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4570 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4571 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4572 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4580 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4590 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4591 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 4.5-4592 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5000 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5001 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5002 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5010 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5011 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5020 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5021 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5022 | No fix listed |
Show 139 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5030 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5032 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5040 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0-5041 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.0.6 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5100 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5101 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5102 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5103 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5104 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5105 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5106 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5107 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5108 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5109 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5110 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5111 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5112 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5113 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5114 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5115 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.1-5116 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5200 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5201 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5202 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5203 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5204 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5205 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5206 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.2-5207 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5300 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5301 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5302 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5303 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5304 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5305 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5306 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5307 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5308 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5309 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5310 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5311 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5312 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5313 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5314 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5315 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5316 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5317 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5318 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5319 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5320 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5321 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5322 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5323 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5324 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5325 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5326 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5327 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5328 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5329 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.3-5330 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.4-5400 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5500 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5501 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5502 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5503 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5504 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5505 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5506 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5507 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5508 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5509 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5510 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5511 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5512 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5513 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5514 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5515 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5516 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5517 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5518 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5519 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5520 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.5-5521 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5600 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5601 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5602 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5603 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5604 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5605 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5606 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.6-5607 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5607 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5700 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5701 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5702 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5703 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5704 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5705 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5706 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5707 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5708 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5709 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.7-5710 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5800 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5801 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5802 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5803 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5804 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5805 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5806 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5807 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5808 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5809 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5810 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5811 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5812 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5813 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5814 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5815 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 5.8-5816 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6000 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6001 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6002 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6003 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6004 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6005 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6006 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6007 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6008 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6009 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6012 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.0-6013 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.1 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.1-6100 | No fix listed |
| Zohocorp ManageEngine ADSelfService Plus | = 6.1-6101 | No fix listed |
References
- blog.stmcyber.com third-party-advisory
- pitstop.manageengine.com vendor-advisory
- www.manageengine.com vendor-advisory
- www.manageengine.com release-notes vendor-advisory