CVEDB API

Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.186

EPSS Ranking 94.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 5.0

References

Products affected by CVE-2021-37417

Zohocorp » Manageengine Adselfservice Plus » Version: 4.5

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5
Zohocorp » Manageengine Adselfservice Plus » Version: 5.0

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0
Zohocorp » Manageengine Adselfservice Plus » Version: 5.0.6

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.0.6
Zohocorp » Manageengine Adselfservice Plus » Version: 5.1

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.1
Zohocorp » Manageengine Adselfservice Plus » Version: 5.2

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.2
Zohocorp » Manageengine Adselfservice Plus » Version: 5.3

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.3
Zohocorp » Manageengine Adselfservice Plus » Version: 5.4

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.4
Zohocorp » Manageengine Adselfservice Plus » Version: 5.5

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.5
Zohocorp » Manageengine Adselfservice Plus » Version: 5.6

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.6
Zohocorp » Manageengine Adselfservice Plus » Version: 5.7

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7
Zohocorp » Manageengine Adselfservice Plus » Version: 5.8

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.8
Zohocorp » Manageengine Adselfservice Plus » Version: 6.0

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0
Zohocorp » Manageengine Adselfservice Plus » Version: 6.1

cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.1