Input validation

2022-01-1215:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.084 Low

EPSS

Percentile

94.5%

JSON

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.

CPENameOperatorVersion
log360le5.2.2
manageengine_cloud_security_pluslt4.1
manageengine_cloud_security_pluseq4.1
manageengine_cloud_security_pluseq4.1 build4111
manageengine_cloud_security_pluseq4.1 build4112
manageengine_cloud_security_pluseq4.1 build4113
manageengine_cloud_security_pluseq4.1 build4115
manageengine_cloud_security_pluseq4.1 build4116
manageengine_cloud_security_pluseq4.1 build4110
manageengine_cloud_security_plusle4.1.1.7

Name	Operator	Version
log360	le	5.2.2
manageengine_cloud_security_plus	lt	4.1
manageengine_cloud_security_plus	eq	4.1
manageengine_cloud_security_plus	eq	4.1 build4111
manageengine_cloud_security_plus	eq	4.1 build4112
manageengine_cloud_security_plus	eq	4.1 build4113
manageengine_cloud_security_plus	eq	4.1 build4115
manageengine_cloud_security_plus	eq	4.1 build4116
manageengine_cloud_security_plus	eq	4.1 build4110
manageengine_cloud_security_plus	le	4.1.1.7