CVE-2021-20131

2021-10-1317:30:20

tenable

www.cve.org

manageengine admanager plus

build 7111

post-authentication

code execution

vulnerability

file uploads

personalization interface

AI Score

9.1

Confidence

High

EPSS

0.038

Percentile

91.9%

JSON

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.

CNA Affected

[
  {
    "product": "ManageEngine ADManager Plus Build 7111",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ManageEngine ADManager Plus Build 7111"
      }
    ]
  }
]

References

www.tenable.com/security/research/tra-2021-43