Remote code execution

2021-06-2512:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.6%

JSON

Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.

CPENameOperatorVersion
manageengine_adselfservice_pluseq5.7 5701
manageengine_adselfservice_pluseq5.7 5700
manageengine_adselfservice_pluseq5.7 5702
manageengine_adselfservice_pluseq5.0 5000
manageengine_adselfservice_pluseq5.0 5001
manageengine_adselfservice_pluseq5.0 5002
manageengine_adselfservice_pluseq5.0 5010
manageengine_adselfservice_pluseq5.0 5011
manageengine_adselfservice_pluseq5.0 5020
manageengine_adselfservice_pluseq5.0 5021

Name	Operator	Version
manageengine_adselfservice_plus	eq	5.7 5701
manageengine_adselfservice_plus	eq	5.7 5700
manageengine_adselfservice_plus	eq	5.7 5702
manageengine_adselfservice_plus	eq	5.0 5000
manageengine_adselfservice_plus	eq	5.0 5001
manageengine_adselfservice_plus	eq	5.0 5002
manageengine_adselfservice_plus	eq	5.0 5010
manageengine_adselfservice_plus	eq	5.0 5011
manageengine_adselfservice_plus	eq	5.0 5020
manageengine_adselfservice_plus	eq	5.0 5021