CVE-2021-36982

Published: Aug 12, 2021Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.

Affected (1)

Products: Monitorapp: Application Insight Manager

Monitorapp

1 product

Application Insight Manager

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Monitorapp Application Insight Manager	From b107 to b115

Running on/with	Platform Versions
Monitorapp Application Insight Web Application Firewall	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0022/FEYE-2021-0022.md

Source: cve@mitre.org

Third Party Advisory

https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36982

Source: cve@mitre.org

Third Party Advisory

https://www.monitorapp.com/waf/

Source: cve@mitre.org

ProductVendor Advisory

https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0022/FEYE-2021-0022.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36982

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.monitorapp.com/waf/

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.