CVEDB API

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.374

EPSS Ranking 97.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-37924

Zohocorp » Manageengine Admanager Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_admanager_plus:-
Zohocorp » Manageengine Admanager Plus » Version: 6.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1
Zohocorp » Manageengine Admanager Plus » Version: 6.2

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2
Zohocorp » Manageengine Admanager Plus » Version: 6.5.7

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7
Zohocorp » Manageengine Admanager Plus » Version: 6.6

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6
Zohocorp » Manageengine Admanager Plus » Version: 6.6.5

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5
Zohocorp » Manageengine Admanager Plus » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0
Zohocorp » Manageengine Admanager Plus » Version: 7.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1