← Back

CVE-2021-40173

nvd nist
Published: Aug 29, 2021Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings.

Affected (17)

Zohocorp
1 product
Manageengine Cloud Security Plus
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Zohocorp
Manageengine Cloud Security Plus
Up to 4.0
Manageengine Cloud Security Plus
Version 4.1 4100
Manageengine Cloud Security Plus
Version 4.1 4101
Manageengine Cloud Security Plus
Version 4.1 4102
Manageengine Cloud Security Plus
Version 4.1 4103
Manageengine Cloud Security Plus
Version 4.1 4104
Manageengine Cloud Security Plus
Version 4.1 4105
Manageengine Cloud Security Plus
Version 4.1 4106
Manageengine Cloud Security Plus
Version 4.1 4107
Manageengine Cloud Security Plus
Version 4.1 4108
Manageengine Cloud Security Plus
Version 4.1 4109
Manageengine Cloud Security Plus
Version 4.1 4110
Manageengine Cloud Security Plus
Version 4.1 4111
Manageengine Cloud Security Plus
Version 4.1 4112
Manageengine Cloud Security Plus
Version 4.1 4113
Manageengine Cloud Security Plus
Version 4.1 4115
Manageengine Cloud Security Plus
Version 4.1 4116

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.