cbcvebase.
CVE-2020-21642
published 2022-08-15

CVE-2020-21642: Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run…

PriorityP260critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
7.73%
93.9th percentile
Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.

Affected

15 ranges
VendorProductVersion rangeFixed in
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
zohocorpmanageengine_analytics_plus——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.