CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-07
Zoho ManageEngine ADSelfService Plus REST API Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2021-40539) Security Advisory
[Affected Scope] Zoho ManageEngine ADSelfService Plus version 6113 and prior
[Impact] Unauthenticated remote attackers can bypass REST API authentication and execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately upgrade to build 6114 or later and inspect systems for Indicators of Compromise (IoCs)