CVE-2021-40371

CRITICAL 9.8CVE-2021-40371 · Published 25/10/2021 · updated 17/06/2026

In short

CVE-2021-40371 is a CRITICAL (CVSS 9.8) vulnerability affecting request management (gridprosoftware).
Chance of exploitation in the next 30 days (EPSS): 7.1%, higher than 94.3% of all vulnerabilities.
Fix: update to 2.0.7912 or later.

Package	Affected versions	Patched versions
request management gridprosoftware	`< 2.0.7912`	`2.0.7912`

Description

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap.

References

packetstormsecurity.com/files/164621/GridPro-Request-Management-For-Windows-Azure-Pack-2.0.7905-Directory-Traversal.html · Exploit
seclists.org/fulldisclosure/2021/Oct/33 · Exploit
gridprosoftware.com/products/requestmanagement · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free