Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2021-40539: Zoho Manage Engine ADSelf Service Plus Authentication Bypass Vulnerability

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-40539 Zoho
Related: CVE-2022-28810: Zoho Manage Engine ADSelf Service Plus Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 07, 2023
CVE-2022-47966: Zoho Manage Engine Multiple Products Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Jan 23, 2023
CVE-2022-35405: Zoho Manage Engine Multiple Products Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Sep 22, 2022