Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2021-40539

CVSS 9.8 Actively exploited (KEV) 3 detections found
View on NVD →
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.

Detection rules

Source Rule Status Updated
sigma Suspicious Shells Spawn by Java Utility Keytool test 2023-01-21
sigma ADSelfService Exploitation test 2023-01-02
sigma CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Exploit test 2023-01-02