Known Vulnerabilities for Manageengine Admanager Plus by Zohocorp
Listed below are 10 of the newest known vulnerabilities associated with "Manageengine Admanager Plus" by "Zohocorp".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-37741 | ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities. | 8.8 - HIGH | 2021-09-21 | 2022-07-12 |
| CVE-2021-37539 | Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution. | 9.8 - CRITICAL | 2021-09-27 | 2021-10-01 |
| CVE-2021-37424 | ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover. | 9.8 - CRITICAL | 2021-09-21 | 2022-07-12 |
| CVE-2021-37420 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing. | 6.5 - MEDIUM | 2021-09-21 | 2022-07-12 |
| CVE-2021-37419 | Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF. | 7.5 - HIGH | 2021-09-21 | 2022-03-18 |
| CVE-2021-36772 | Zoho ManageEngine ADManager Plus before 7110 allows stored XSS. | 6.1 - MEDIUM | 2021-07-17 | 2021-07-28 |
| CVE-2021-36771 | Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS. | 6.1 - MEDIUM | 2021-07-17 | 2021-07-28 |
| CVE-2021-33911 | Zoho ManageEngine ADManager Plus before 7110 allows remote code execution. | 9.8 - CRITICAL | 2021-07-17 | 2022-05-03 |
| CVE-2021-20131 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly v... | 8.8 - HIGH | 2021-10-13 | 2021-10-19 |
| CVE-2021-20130 | ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly v... | 8.8 - HIGH | 2021-10-13 | 2021-10-19 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Zohocorp | Manageengine Admanager Plus | 6.6.5 | All | All | All |
| Application | Zohocorp | Manageengine Admanager Plus | 6.6 | 6657 | All | All |
| Application | Zohocorp | Manageengine Admanager Plus | 6.5.7 | All | All | All |
| Application | Zohocorp | Manageengine Admanager Plus | 6.2 | All | All | All |