// For flags

CVE-2021-43296

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor.

Zoho ManageEngine SupportCenter Plus versiones anteriores a 11016, es vulnerable a un ataque de tipo SSRF en ActionExecutor

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-11-03 CVE Reserved
  • 2021-11-30 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-11-05 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-918: Server-Side Request Forgery (SSRF)
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
-
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11001
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11002
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11003
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11004
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11005
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11006
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11007
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11008
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11009
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11010
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11011
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11012
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11013
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11014
Affected
Zohocorp
Search vendor "Zohocorp"
Manageengine Supportcenter Plus
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus"
11.0
Search vendor "Zohocorp" for product "Manageengine Supportcenter Plus" and version "11.0"
11015
Affected