CVE-2021-40539 · Sandworm Watch

Nov 3, 2021high

CVE-2021-40539: Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2021-40539EPSS 99.0%ManageEngineZoho

CISA KEV ↗ · unattributed attribution