CVE-2021-3287

EPSS 51.3%◆ VulnCheck KEV

Vexday Risk Score

52Attention

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 51.3%KEV nãoPoC —Nuclei simMetasploit simPatch —

Lifecycle

22 Apr 2021Published on NVD

26 Jul 2021Metasploit module available

Weaponization speed

94 daysto Metasploit module

Recommendation: Patch as soon as possible — active exploitation confirmed.

Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.

Affected products

References