ID CVE-2021-42847
Summary Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.
References
Vulnerable Configurations
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:4.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1:5120:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:5.1:5120:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6000:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6000:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6001:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6001:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6002:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6002:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6003:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6003:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6010:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6010:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6030:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6030:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6031:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6031:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6032:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6032:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6033:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6033:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6050:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6050:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6052:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6052:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6053:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6053:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6055:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6055:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6056:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6056:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6057:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6057:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6058:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6058:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6060:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6060:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6061:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6061:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6062:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6062:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6066:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6066:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6067:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6067:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6068:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6068:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6070:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6070:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6071:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6071:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6072:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6072:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6075:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6075:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6076:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6076:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6077:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0:6077:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:-:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:-:*:*:*:*:*:*
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*
    cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 09-05-2023 - 18:15)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
Last major update 09-05-2023 - 18:15
Published 11-11-2021 - 05:15
Last modified 09-05-2023 - 18:15
Back to Top