// For flags

CVE-2021-3287

ManageEngine OpManager SumPDU Java Deserialization

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.

Zoho ManageEngine OpManager versiones anteriores a 12.5.329, permite una ejecución de código remota no autenticada debido a una omisión general en la clase de deserialización

An HTTP endpoint used by the Manage Engine OpManager Smart Update Manager component can be leveraged to deserialize an arbitrary Java object. This can be abused by an unauthenticated remote attacker to execute OS commands in the context of the OpManager application. This vulnerability is also present in other products that are built on top of the OpManager application. This vulnerability affects OpManager versions 12.1 through 12.5.328.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-01-25 CVE Reserved
  • 2021-04-22 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-08-03 First Exploit
  • 2024-08-08 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-502: Deserialization of Untrusted Data
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
< 12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version " < 12.5"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125000
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125100
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125101
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125102
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125108
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125110
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125111
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125112
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125113
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125114
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125116
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125117
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125118
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125120
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125121
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125123
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125124
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125125
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125136
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125137
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125139
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125140
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125143
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125144
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125145
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125156
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125157
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125158
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125159
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125161
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125163
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125174
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125175
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125176
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125177
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125178
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125180
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125181
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125192
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125193
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125194
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125195
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125196
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125197
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125198
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125201
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125204
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125212
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125213
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125214
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125215
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125216
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125228
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125229
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125230
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125231
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125232
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125233
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125312
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125323
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125324
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125326
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Opmanager
Search vendor "Zohocorp" for product "Manageengine Opmanager"
12.5
Search vendor "Zohocorp" for product "Manageengine Opmanager" and version "12.5"
build125328
Affected