CVE-2021-37931: Malicious File Upload
First published: Thu Oct 07 2021(Updated: )
Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zohocorp ManageEngine ADManager Plus | <7.1 | |
| Zohocorp ManageEngine ADManager Plus | =7.1 | |
| Zohocorp ManageEngine ADManager Plus | =7.1-7100 | |
| Zohocorp ManageEngine ADManager Plus | =7.1-7101 | |
| Zohocorp ManageEngine ADManager Plus | =7.1-7102 | |
| Zohocorp ManageEngine ADManager Plus | =7.1-7110 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Zoho ManageEngine ADManager Plus?
The vulnerability ID for Zoho ManageEngine ADManager Plus is CVE-2021-37931.
What is the severity of CVE-2021-37931?
The severity of CVE-2021-37931 is critical with a severity value of 9.8.
What is affected by CVE-2021-37931?
Zoho ManageEngine ADManager Plus versions 7.1.0 and prior are affected by CVE-2021-37931.
What is the impact of CVE-2021-37931?
CVE-2021-37931 allows unrestricted file upload, which can lead to remote code execution.
How can I fix CVE-2021-37931?
Upgrade to a version of Zoho ManageEngine ADManager Plus that is not affected by CVE-2021-37931.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/zohocorp
- canonical/zohocorp manageengine admanager plus
- version/zohocorp manageengine admanager plus/7.1
- version/zohocorp manageengine admanager plus/7.1-7100
- version/zohocorp manageengine admanager plus/7.1-7101
- version/zohocorp manageengine admanager plus/7.1-7102
- version/zohocorp manageengine admanager plus/7.1-7110