Remote code execution

2021-11-1105:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

JSON

Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.

CPENameOperatorVersion
manageengine_admanager_pluseq7.1 7100
manageengine_admanager_pluseq7.1 7101
manageengine_admanager_pluslt7.1
manageengine_admanager_pluseq7.1
manageengine_admanager_pluseq7.1 7102
manageengine_admanager_pluseq7.1 7110
manageengine_admanager_pluseq7.1 7111
manageengine_admanager_pluseq7.1 7112
manageengine_admanager_pluseq7.1 7113
manageengine_admanager_pluseq7.1 7114

Name	Operator	Version
manageengine_admanager_plus	eq	7.1 7100
manageengine_admanager_plus	eq	7.1 7101
manageengine_admanager_plus	lt	7.1
manageengine_admanager_plus	eq	7.1
manageengine_admanager_plus	eq	7.1 7102
manageengine_admanager_plus	eq	7.1 7110
manageengine_admanager_plus	eq	7.1 7111
manageengine_admanager_plus	eq	7.1 7112
manageengine_admanager_plus	eq	7.1 7113
manageengine_admanager_plus	eq	7.1 7114

References

www.manageengine.com/products/ad-manager/release-notes.html