‏CVE-2021-44651 | Zoho ManageEngine CloudSecurityPlus updatePersonalizeSettings Privilege Escalation

0	21
1	18

source_cve_nvd_summary	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

90%	26
50%	12
70%	1

90%

50%

70%

90%	26
80%	12
70%	1

90%

80%

70%

ID	ملتزم	المستخدم	مجال	تغيير	ملاحظات	تمت الموافقة	السبب	C
12050151	15/01/2022	VulD...	cve_nvd_summary	Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.	cve.mitre.org	15/01/2022	تمت الموافقة	70
12037109	12/01/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	12/01/2022	تمت الموافقة	90
12037108	12/01/2022	VulD...	cvss3_meta_tempscore	6.0	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037107	12/01/2022	VulD...	cvss3_meta_basescore	6.3	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037106	12/01/2022	VulD...	cvss3_vuldb_tempscore	6.0	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037105	12/01/2022	VulD...	cvss3_vuldb_basescore	6.3	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037104	12/01/2022	VulD...	cvss2_vuldb_tempscore	5.7	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037103	12/01/2022	VulD...	cvss2_vuldb_basescore	6.5	see CVSS documentation	12/01/2022	تمت الموافقة	90
12037102	12/01/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	12/01/2022	تمت الموافقة	80
12037101	12/01/2022	VulD...	cvss3_vuldb_ui	N	derived from historical data	12/01/2022	تمت الموافقة	80
12037100	12/01/2022	VulD...	cvss3_vuldb_pr	L	derived from historical data	12/01/2022	تمت الموافقة	80
12037099	12/01/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	12/01/2022	تمت الموافقة	80
12037098	12/01/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	12/01/2022	تمت الموافقة	80
12037097	12/01/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037096	12/01/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037095	12/01/2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037094	12/01/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037093	12/01/2022	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037092	12/01/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80
12037091	12/01/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	12/01/2022	تمت الموافقة	80

ملتزم

المستخدم

مجال

تغيير

ملاحظات

تمت الموافقة

السبب

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.