Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
2021-11-11T05:15:09.550
2024-11-21T06:27:03.213
Modified
CVSSv3.1: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | zohocorp | manageengine_admanager_plus | < 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |
| Application | zohocorp | manageengine_admanager_plus | 7.1 | Yes |