CVE-2021-42099: Malicious File Upload
First published: Tue Nov 30 2021(Updated: )
Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ManageEngine M365 Manager Plus | ||
| ManageEngine M365 Manager Plus | =build_4000 | |
| ManageEngine M365 Manager Plus | =build_4001 | |
| ManageEngine M365 Manager Plus | =build_4002 | |
| ManageEngine M365 Manager Plus | =build_4003 | |
| ManageEngine M365 Manager Plus | =build_4004 | |
| ManageEngine M365 Manager Plus | =build_4005 | |
| ManageEngine M365 Manager Plus | =build_4007 | |
| ManageEngine M365 Manager Plus | =build_4008 | |
| ManageEngine M365 Manager Plus | =build_4009 | |
| ManageEngine M365 Manager Plus | =build_4010 | |
| ManageEngine M365 Manager Plus | =build_4011 | |
| ManageEngine M365 Manager Plus | =build_4012 | |
| ManageEngine M365 Manager Plus | =build_4013 | |
| ManageEngine M365 Manager Plus | =build_4014 | |
| ManageEngine M365 Manager Plus | =build_4100 | |
| ManageEngine M365 Manager Plus | =build_4101 | |
| ManageEngine M365 Manager Plus | =build_4102 | |
| ManageEngine M365 Manager Plus | =build_4103 | |
| ManageEngine M365 Manager Plus | =build_4104 | |
| ManageEngine M365 Manager Plus | =build_4105 | |
| ManageEngine M365 Manager Plus | =build_4106 | |
| ManageEngine M365 Manager Plus | =build_4108 | |
| ManageEngine M365 Manager Plus | =build_4109 | |
| ManageEngine M365 Manager Plus | =build_4110 | |
| ManageEngine M365 Manager Plus | =build_4111 | |
| ManageEngine M365 Manager Plus | =build_4112 | |
| ManageEngine M365 Manager Plus | =build_4113 | |
| ManageEngine M365 Manager Plus | =build_4115 | |
| ManageEngine M365 Manager Plus | =build_4116 | |
| ManageEngine M365 Manager Plus | =build_4117 | |
| ManageEngine M365 Manager Plus | =build_4118 | |
| ManageEngine M365 Manager Plus | =build_4119 | |
| ManageEngine M365 Manager Plus | =build_4200 | |
| ManageEngine M365 Manager Plus | =build_4201 | |
| ManageEngine M365 Manager Plus | =build_4202 | |
| ManageEngine M365 Manager Plus | =build_4203 | |
| ManageEngine M365 Manager Plus | =build_4204 | |
| ManageEngine M365 Manager Plus | =build_4205 | |
| ManageEngine M365 Manager Plus | =build_4206 | |
| ManageEngine M365 Manager Plus | =build_4207 | |
| ManageEngine M365 Manager Plus | =build_4208 | |
| ManageEngine M365 Manager Plus | =build_4209 | |
| ManageEngine M365 Manager Plus | =build_4210 | |
| ManageEngine M365 Manager Plus | =build_4211 | |
| ManageEngine M365 Manager Plus | =build_4212 | |
| ManageEngine M365 Manager Plus | =build_4213 | |
| ManageEngine M365 Manager Plus | =build_4214 | |
| ManageEngine M365 Manager Plus | =build_4215 | |
| ManageEngine M365 Manager Plus | =build_4216 | |
| ManageEngine M365 Manager Plus | =build_4217 | |
| ManageEngine M365 Manager Plus | =build_4218 | |
| ManageEngine M365 Manager Plus | =build_4219 | |
| ManageEngine M365 Manager Plus | =build_4220 | |
| ManageEngine M365 Manager Plus | =build_4221 | |
| ManageEngine M365 Manager Plus | =build_4222 | |
| ManageEngine M365 Manager Plus | =build_4300 | |
| ManageEngine M365 Manager Plus | =build_4301 | |
| ManageEngine M365 Manager Plus | =build_4302 | |
| ManageEngine M365 Manager Plus | =build_4303 | |
| ManageEngine M365 Manager Plus | =build_4304 | |
| ManageEngine M365 Manager Plus | =build_4305 | |
| ManageEngine M365 Manager Plus | =build_4306 | |
| ManageEngine M365 Manager Plus | =build_4308 | |
| ManageEngine M365 Manager Plus | =build_4309 | |
| ManageEngine M365 Manager Plus | =build_4310 | |
| ManageEngine M365 Manager Plus | =build_4311 | |
| ManageEngine M365 Manager Plus | =build_4312 | |
| ManageEngine M365 Manager Plus | =build_4316 | |
| ManageEngine M365 Manager Plus | =build_4317 | |
| ManageEngine M365 Manager Plus | =build_4318 | |
| ManageEngine M365 Manager Plus | =build_4319 | |
| ManageEngine M365 Manager Plus | =build_4320 | |
| ManageEngine M365 Manager Plus | =build_4321 | |
| ManageEngine M365 Manager Plus | =build_4322 | |
| ManageEngine M365 Manager Plus | =build_4324 | |
| ManageEngine M365 Manager Plus | =build_4325 | |
| ManageEngine M365 Manager Plus | =build_4327 | |
| ManageEngine M365 Manager Plus | =build_4328 | |
| ManageEngine M365 Manager Plus | =build_4329 | |
| ManageEngine M365 Manager Plus | =build_4330 | |
| ManageEngine M365 Manager Plus | =build_4331 | |
| ManageEngine M365 Manager Plus | =build_4332 | |
| ManageEngine M365 Manager Plus | =build_4333 | |
| ManageEngine M365 Manager Plus | =build_4334 | |
| ManageEngine M365 Manager Plus | =build_4335 | |
| ManageEngine M365 Manager Plus | =build_4336 | |
| ManageEngine M365 Manager Plus | =build_4400 | |
| ManageEngine M365 Manager Plus | =build_4401 | |
| ManageEngine M365 Manager Plus | =build_4402 | |
| ManageEngine M365 Manager Plus | =build_4403 | |
| ManageEngine M365 Manager Plus | =build_4406 | |
| ManageEngine M365 Manager Plus | =build_4407 | |
| ManageEngine M365 Manager Plus | =build_4408 | |
| ManageEngine M365 Manager Plus | =build_4410 | |
| ManageEngine M365 Manager Plus | =build_4411 | |
| ManageEngine M365 Manager Plus | =build_4412 | |
| ManageEngine M365 Manager Plus | =build_4413 | |
| ManageEngine M365 Manager Plus | =build_4414 | |
| ManageEngine M365 Manager Plus | =build_4415 | |
| ManageEngine M365 Manager Plus | =build_4416 | |
| ManageEngine M365 Manager Plus | =build_4417 | |
| ManageEngine M365 Manager Plus | =build_4418 | |
| ManageEngine M365 Manager Plus | =build_4419 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-42099?
CVE-2021-42099 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-42099?
To mitigate CVE-2021-42099, upgrade to ManageEngine M365 Manager Plus version 4421 or later.
What type of vulnerability is CVE-2021-42099?
CVE-2021-42099 is a file-upload vulnerability that allows for remote code execution.
Which versions of ManageEngine M365 Manager Plus are affected by CVE-2021-42099?
CVE-2021-42099 affects ManageEngine M365 Manager Plus versions prior to 4421.
What are the potential consequences of exploiting CVE-2021-42099?
Exploitation of CVE-2021-42099 could allow an attacker to execute arbitrary code on the affected system.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/zohocorp
- canonical/manageengine m365 manager plus
- version/manageengine m365 manager plus/build_4000
- version/manageengine m365 manager plus/build_4001
- version/manageengine m365 manager plus/build_4002
- version/manageengine m365 manager plus/build_4003
- version/manageengine m365 manager plus/build_4004
- version/manageengine m365 manager plus/build_4005
- version/manageengine m365 manager plus/build_4007
- version/manageengine m365 manager plus/build_4008
- version/manageengine m365 manager plus/build_4009
- version/manageengine m365 manager plus/build_4010
- version/manageengine m365 manager plus/build_4011
- version/manageengine m365 manager plus/build_4012
- version/manageengine m365 manager plus/build_4013
- version/manageengine m365 manager plus/build_4014
- version/manageengine m365 manager plus/build_4100
- version/manageengine m365 manager plus/build_4101
- version/manageengine m365 manager plus/build_4102
- version/manageengine m365 manager plus/build_4103
- version/manageengine m365 manager plus/build_4104
- version/manageengine m365 manager plus/build_4105
- version/manageengine m365 manager plus/build_4106
- version/manageengine m365 manager plus/build_4108
- version/manageengine m365 manager plus/build_4109
- version/manageengine m365 manager plus/build_4110
- version/manageengine m365 manager plus/build_4111
- version/manageengine m365 manager plus/build_4112
- version/manageengine m365 manager plus/build_4113
- version/manageengine m365 manager plus/build_4115
- version/manageengine m365 manager plus/build_4116
- version/manageengine m365 manager plus/build_4117
- version/manageengine m365 manager plus/build_4118
- version/manageengine m365 manager plus/build_4119
- version/manageengine m365 manager plus/build_4200
- version/manageengine m365 manager plus/build_4201
- version/manageengine m365 manager plus/build_4202
- version/manageengine m365 manager plus/build_4203
- version/manageengine m365 manager plus/build_4204
- version/manageengine m365 manager plus/build_4205
- version/manageengine m365 manager plus/build_4206
- version/manageengine m365 manager plus/build_4207
- version/manageengine m365 manager plus/build_4208
- version/manageengine m365 manager plus/build_4209
- version/manageengine m365 manager plus/build_4210
- version/manageengine m365 manager plus/build_4211
- version/manageengine m365 manager plus/build_4212
- version/manageengine m365 manager plus/build_4213
- version/manageengine m365 manager plus/build_4214
- version/manageengine m365 manager plus/build_4215
- version/manageengine m365 manager plus/build_4216
- version/manageengine m365 manager plus/build_4217
- version/manageengine m365 manager plus/build_4218
- version/manageengine m365 manager plus/build_4219
- version/manageengine m365 manager plus/build_4220
- version/manageengine m365 manager plus/build_4221
- version/manageengine m365 manager plus/build_4222
- version/manageengine m365 manager plus/build_4300
- version/manageengine m365 manager plus/build_4301
- version/manageengine m365 manager plus/build_4302
- version/manageengine m365 manager plus/build_4303
- version/manageengine m365 manager plus/build_4304
- version/manageengine m365 manager plus/build_4305
- version/manageengine m365 manager plus/build_4306
- version/manageengine m365 manager plus/build_4308
- version/manageengine m365 manager plus/build_4309
- version/manageengine m365 manager plus/build_4310
- version/manageengine m365 manager plus/build_4311
- version/manageengine m365 manager plus/build_4312
- version/manageengine m365 manager plus/build_4316
- version/manageengine m365 manager plus/build_4317
- version/manageengine m365 manager plus/build_4318
- version/manageengine m365 manager plus/build_4319
- version/manageengine m365 manager plus/build_4320
- version/manageengine m365 manager plus/build_4321
- version/manageengine m365 manager plus/build_4322
- version/manageengine m365 manager plus/build_4324
- version/manageengine m365 manager plus/build_4325
- version/manageengine m365 manager plus/build_4327
- version/manageengine m365 manager plus/build_4328
- version/manageengine m365 manager plus/build_4329
- version/manageengine m365 manager plus/build_4330
- version/manageengine m365 manager plus/build_4331
- version/manageengine m365 manager plus/build_4332
- version/manageengine m365 manager plus/build_4333
- version/manageengine m365 manager plus/build_4334
- version/manageengine m365 manager plus/build_4335
- version/manageengine m365 manager plus/build_4336
- version/manageengine m365 manager plus/build_4400
- version/manageengine m365 manager plus/build_4401
- version/manageengine m365 manager plus/build_4402
- version/manageengine m365 manager plus/build_4403
- version/manageengine m365 manager plus/build_4406
- version/manageengine m365 manager plus/build_4407
- version/manageengine m365 manager plus/build_4408
- version/manageengine m365 manager plus/build_4410
- version/manageengine m365 manager plus/build_4411
- version/manageengine m365 manager plus/build_4412
- version/manageengine m365 manager plus/build_4413
- version/manageengine m365 manager plus/build_4414
- version/manageengine m365 manager plus/build_4415
- version/manageengine m365 manager plus/build_4416
- version/manageengine m365 manager plus/build_4417
- version/manageengine m365 manager plus/build_4418
- version/manageengine m365 manager plus/build_4419