CVE-2021-42002 Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
CriticalCVSS 9.8
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp manageengine admanager plus | < 7.1 | 7.1 |
| Zohocorp manageengine admanager plus | = 7.1 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7100 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7101 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7102 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7110 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7111 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7112 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7113 | No fix listed |
| Zohocorp manageengine admanager plus | = 7.1-7114 | No fix listed |
References
- www.manageengine.com vendor-advisory