CVE-2021-43296: SSRF
Published Nov 30, 2021
·Updated
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor.
Affected Software
16 affected components
ZohoCorp Manageengine Supportcenter Plus=11.0
ZohoCorp Manageengine Supportcenter Plus=11.0-11001
ZohoCorp Manageengine Supportcenter Plus=11.0-11002
ZohoCorp Manageengine Supportcenter Plus=11.0-11003
ZohoCorp Manageengine Supportcenter Plus=11.0-11004
ZohoCorp Manageengine Supportcenter Plus=11.0-11005
ZohoCorp Manageengine Supportcenter Plus=11.0-11006
ZohoCorp Manageengine Supportcenter Plus=11.0-11007
ZohoCorp Manageengine Supportcenter Plus=11.0-11008
ZohoCorp Manageengine Supportcenter Plus=11.0-11009
ZohoCorp Manageengine Supportcenter Plus=11.0-11010
ZohoCorp Manageengine Supportcenter Plus=11.0-11011
ZohoCorp Manageengine Supportcenter Plus=11.0-11012
ZohoCorp Manageengine Supportcenter Plus=11.0-11013
ZohoCorp Manageengine Supportcenter Plus=11.0-11014
ZohoCorp Manageengine Supportcenter Plus=11.0-11015
Event History
Nov 30, 2021
CVE Published
via MITRE·06:40 PM
Data Sourced
via MITRE·06:40 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-43296.
2
What is the severity of CVE-2021-43296?
The severity of CVE-2021-43296 is high with a CVSS score of 7.5.
3
What software versions are affected by CVE-2021-43296?
Zohocorp Manageengine Supportcenter Plus version 11.0 to 11.0-11015 are affected by CVE-2021-43296.
4
What is the description of CVE-2021-43296?
CVE-2021-43296 is a vulnerability in Zoho ManageEngine SupportCenter Plus before 11016 that allows for SSRF attacks in ActionExecutor.
5
How do I fix CVE-2021-43296?
To fix CVE-2021-43296, update Zoho ManageEngine SupportCenter Plus to version 11.0-11016 or later.