Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-40177 Details

Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.manageengine.com/log-management/readme.html#Build%205225	CVE	Release NotesVendor Advisory
https://www.manageengine.com/log-management/readme.html#Build%205225	[email protected]	Release NotesVendor Advisory

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Product	Versions
zohocorp manageengine log360	<= 5.1 5.2 build5200 5.2 build5201 5.2 build5206 5.2 build5209
CPE cpe:2.3:a:zohocorp:manageengine_log360:::::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5200:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5201:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5206:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5209:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5210:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5211:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5213:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5214:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5218:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5219:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5220_beta:::::: cpe:2.3:a:zohocorp:manageengine_log360:5.2:build5224:::::: Remediation No remediation found in references.

Product

Versions

zohocorp manageengine log360

<= 5.1

5.2 build5200

5.2 build5201

5.2 build5206

5.2 build5209

4 change records found show changes

QUICK INFO