CVE-2021-37422: SQL Injection
Published Sep 10, 2021
·Updated
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.
Affected Software
14 affected components
ZohoCorp ManageEngine ADSelfService Plus<6.1
ZohoCorp ManageEngine ADSelfService Plus=6.1
ZohoCorp ManageEngine ADSelfService Plus=6.1-6100
ZohoCorp ManageEngine ADSelfService Plus=6.1-6101
ZohoCorp ManageEngine ADSelfService Plus=6.1-6102
ZohoCorp ManageEngine ADSelfService Plus=6.1-6103
ZohoCorp ManageEngine ADSelfService Plus=6.1-6104
ZohoCorp ManageEngine ADSelfService Plus=6.1-6105
ZohoCorp ManageEngine ADSelfService Plus=6.1-6106
ZohoCorp ManageEngine ADSelfService Plus=6.1-6107
ZohoCorp ManageEngine ADSelfService Plus=6.1-6108
ZohoCorp ManageEngine ADSelfService Plus=6.1-6109
ZohoCorp ManageEngine ADSelfService Plus=6.1-6110
ZohoCorp ManageEngine ADSelfService Plus=6.1-6111
Event History
Sep 10, 2021
CVE Published
via MITRE·03:06 PM
Data Sourced
via MITRE·03:06 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-37422.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.'
3
What is the affected software?
The affected software is Zoho ManageEngine ADSelfService Plus version 6.1 and prior.
4
What is the severity of CVE-2021-37422?
The severity of CVE-2021-37422 is critical with a CVSS score of 9.8.
5
How can I fix CVE-2021-37422?
To fix CVE-2021-37422, apply the hotfix released by Zoho ManageEngine ADSelfService Plus. More information can be found at the provided reference link.