CVEDB API

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.36

EPSS Ranking 96.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-37926

Zohocorp » Manageengine Admanager Plus » Version: N/A

cpe:2.3:a:zohocorp:manageengine_admanager_plus:-
Zohocorp » Manageengine Admanager Plus » Version: 6.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.1
Zohocorp » Manageengine Admanager Plus » Version: 6.2

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.2
Zohocorp » Manageengine Admanager Plus » Version: 6.5.7

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.5.7
Zohocorp » Manageengine Admanager Plus » Version: 6.6

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6
Zohocorp » Manageengine Admanager Plus » Version: 6.6.5

cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5
Zohocorp » Manageengine Admanager Plus » Version: 7.0

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.0
Zohocorp » Manageengine Admanager Plus » Version: 7.1

cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1