CVE-2021-37419: SSRF
Published Sep 21, 2021
·Updated
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.
Affected Software
14 affected components
ZohoCorp ManageEngine ADManager Plus<6.1
ZohoCorp ManageEngine ADManager Plus=6.1
ZohoCorp ManageEngine ADManager Plus=6.1-6100
ZohoCorp ManageEngine ADManager Plus=6.1-6101
ZohoCorp ManageEngine ADManager Plus=6.1-6102
ZohoCorp ManageEngine ADManager Plus=6.1-6103
ZohoCorp ManageEngine ADManager Plus=6.1-6104
ZohoCorp ManageEngine ADManager Plus=6.1-6105
ZohoCorp ManageEngine ADManager Plus=6.1-6106
ZohoCorp ManageEngine ADManager Plus=6.1-6107
ZohoCorp ManageEngine ADManager Plus=6.1-6108
ZohoCorp ManageEngine ADManager Plus=6.1-6109
ZohoCorp ManageEngine ADManager Plus=6.1-6110
ZohoCorp ManageEngine ADManager Plus=6.1-6111
Remediation
Event History
Sep 21, 2021
CVE Published
via MITRE·12:53 PM
Data Sourced
via MITRE·12:53 PM
Description
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-37419?
CVE-2021-37419 is a vulnerability in Zoho ManageEngine ADSelfService Plus before version 6.1.12 that allows for Server-Side Request Forgery (SSRF).
2
How severe is CVE-2021-37419?
CVE-2021-37419 has a severity rating of 7.5 (high).
3
What is affected by CVE-2021-37419?
Zoho ManageEngine ADSelfService Plus versions before 6.1.12 are affected by CVE-2021-37419.
4
How can I fix CVE-2021-37419?
To fix CVE-2021-37419, upgrade to Zoho ManageEngine ADSelfService Plus version 6.1.12 or higher.
5
Where can I find more information about CVE-2021-37419?
For more information about CVE-2021-37419, you can refer to the following resources: [link 1](https://blog.stmcyber.com/vulns/cve-2021-37419/), [link 2](https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6112-hotfix-release), [link 3](https://www.manageengine.com).