CVE Watch—

CVE-2021-40539

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

CVSS

—

Sem CVSS

EPSS

99.0%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.0%EPSS · 30 dias99.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Zoho / ManageEngine

Vulnerabilidade

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Sim

Descrição resumida

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-40539

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-479669.8 CRÍ

100.0%

KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability98d CVE-2022-35405—

100.0%

KEV—80Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability—CVE-2020-10189—

100.0%

KEV—80Zoho ManageEngine Desktop Central File Upload Vulnerability—CVE-2022-28810—

99.4%

KEV—80Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability—CVE-2019-8394—

99.2%

KEV—80Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability—