9.8

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.

Data is provided by the National Vulnerability Database (NVD)
ZohocorpManageengine Adaudit Plus Version7.0 Update-
ZohocorpManageengine Adaudit Plus Version7.0 Update7000
ZohocorpManageengine Adaudit Plus Version7.0 Update7002
ZohocorpManageengine Adaudit Plus Version7.0 Update7003
ZohocorpManageengine Adaudit Plus Version7.0 Update7004
ZohocorpManageengine Adaudit Plus Version7.0 Update7005
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 87.1% 0.994
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P