Disclaimer: This document is marked TLP:CLEAR. Disclosure is not limited. Sources may use TLP:CLEAR when information carries minimal or no foreseeable

media.defense.gov · Undated · Licence: not cleared; local research copy only

CVEs this report names

2 CVEs

CVE-2021-40539Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
Zoho · ManageEngineKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1047Windows Management Instrumentation+11 more · 1 report
99.0%Top 0.07%
83.7priority
CVE-2021-27860FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
FatPipe · WARP, IPVPN, and MPVPN softwareKEVPublic exploitHigh · 8.8T1505.003Web Shell1 report
39.7%Top 1.4%
72.8priority

 CVE-2021-40539—ManageEngine ADSelfService Plus.

 CVE-2021-27860—FatPipe WARP, IPVPN, MPVPN.

1 link, in kill-chain order

MITRE CTID mapping of the KEV entry

 Exploiting vulnerabilities [T1190] in widely used software including, but not limited to:  CVE-2021-40539—ManageEngine ADSelfService Plus.