// For flags

CVE-2021-41833

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.

Zoho ManageEngine Patch Connect Plus versiones anteriores a 90099, es vulnerable a una ejecución de código remota sin autenticación

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-10-01 CVE Reserved
  • 2021-11-11 CVE Published
  • 2024-07-27 EPSS Updated
  • 2024-08-04 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-434: Unrestricted Upload of File with Dangerous Type
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
< 9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version " < 9.0.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90063
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90064
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90065
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90066
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90067
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90068
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90069
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90070
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90071
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90072
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90073
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90074
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90075
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90076
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90077
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90078
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90079
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90080
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90081
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90082
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90083
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90084
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90085
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90086
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90087
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90088
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90089
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90090
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90091
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90092
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90093
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90094
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90095
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90096
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90097
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Patch Connect Plus
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus"
9.0.0
Search vendor "Zohocorp" for product "Manageengine Patch Connect Plus" and version "9.0.0"
build90098
Affected