Lucene search

[email protected]CVE-2021-37420

HistorySep 21, 2021 - 1:15 p.m.

CVE-2021-37420

2021-09-2113:15:07

CWE-306

[email protected]

web.nvd.nist.gov

zoho

manageengine

adselfservice plus

vulnerability

mail spoofing

cve-2021-37420

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.1%

JSON

Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.

Affected configurations

NVD

Node

zohocorpmanageengine_admanager_plusRange<6.1

zohocorpmanageengine_admanager_plusMatch6.1-

zohocorpmanageengine_admanager_plusMatch6.16100

zohocorpmanageengine_admanager_plusMatch6.16101

zohocorpmanageengine_admanager_plusMatch6.16102

zohocorpmanageengine_admanager_plusMatch6.16103

zohocorpmanageengine_admanager_plusMatch6.16104

zohocorpmanageengine_admanager_plusMatch6.16105

zohocorpmanageengine_admanager_plusMatch6.16106

zohocorpmanageengine_admanager_plusMatch6.16107

zohocorpmanageengine_admanager_plusMatch6.16108

zohocorpmanageengine_admanager_plusMatch6.16109

zohocorpmanageengine_admanager_plusMatch6.16110

zohocorpmanageengine_admanager_plusMatch6.16111

CPENameOperatorVersion
zohocorp:manageengine_admanager_pluszohocorp manageengine admanager pluslt6.1

CPE	Name	Operator	Version
zohocorp:manageengine_admanager_plus	zohocorp manageengine admanager plus	lt	6.1

References

blog.stmcyber.com/vulns/cve-2021-37420/

pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6112-hotfix-release

www.manageengine.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

59.1%

JSON

Related for CVE-2021-37420

cvelist1 nvd1 prion1