CVE-2021-20131

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.

Score

CVSS 3.1 8.8 High

Status

Modified - vulnreport@tenable.com

Published

2021-10-13

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Manageengine Admanager Plus (Zohocorp)

References

• https://www.tenable.com/security/research/tra-2021-43