9.8

CVE-2021-42099

Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4000
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4001
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4002
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4003
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4004
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4005
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4007
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4008
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4009
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4010
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4011
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4012
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4013
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4014
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4100
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4101
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4102
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4103
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4104
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4105
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4106
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4108
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4109
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4110
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4111
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4112
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4113
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4115
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4116
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4117
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4118
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4119
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4200
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4201
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4202
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4203
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4204
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4205
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4206
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4207
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4208
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4209
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4210
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4211
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4212
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4213
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4214
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4215
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4216
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4217
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4218
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4219
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4220
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4221
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4222
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4300
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4301
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4302
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4303
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4304
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4305
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4306
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4308
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4309
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4310
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4311
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4312
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4316
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4317
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4318
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4319
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4320
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4321
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4322
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4324
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4325
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4327
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4328
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4329
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4330
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4331
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4332
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4333
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4334
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4335
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4336
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4400
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4401
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4402
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4403
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4406
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4407
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4408
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4410
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4411
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4412
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4413
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4414
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4415
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4416
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4417
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4418
Zohocorp ≫ Manageengine M365 Manager Plus Version build_4419
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.55% 0.929
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://www.manageengine.com
Product
https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html#4421
Vendor Advisory
Release Notes