6.1

CVE-2021-27214

Exploit
A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting (XSS) attack against the administrative interface via an HTTP request, a different vulnerability than CVE-2019-3905.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update -
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6000
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6001
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6002
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6003
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6004
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6005
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6006
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6007
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6008
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6009
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6012
Zohocorp ≫ Manageengine Adselfservice Plus Version 6.0 Update 6013
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.04% 0.787
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://www.manageengine.com/products/self-service-password/release-notes.html
Vendor Advisory
Release Notes
https://www.horizonsecurity.it/lang_EN/advisories/?a=20&title=ManageEngine+ADSelfService+Plus+privilege+escalation++CVE202127214
Third Party Advisory
Exploit