CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap.

• CWE-22

• http://packetstormsecurity.com/files/164621/GridPro-Request-Management-For-Windows-Azure-Pack-2.0.7905-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Oct/33Exploit, Mailing List, Third Party Advisory
• https://www.gridprosoftware.com/products/requestmanagement/Product, Vendor Advisory
• http://packetstormsecurity.com/files/164621/GridPro-Request-Management-For-Windows-Azure-Pack-2.0.7905-Directory-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2021/Oct/33Exploit, Mailing List, Third Party Advisory
• https://www.gridprosoftware.com/products/requestmanagement/Product, Vendor Advisory

Published

Oct 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40365Affected devices don't process correctly certain special cra…7.5
• CVE-2021-40366A vulnerability has been identified in Climatix POL909 (AWB …7.4
• CVE-2021-40367A vulnerability has been identified in syngo fastView (All v…7.8
• CVE-2021-40368A vulnerability has been identified in SIMATIC S7-400 CPU 4…7.5
• CVE-2021-40369A carefully crafted plugin link invocation could trigger an …6.1
• CVE-2021-4037A vulnerability was found in the fs/inode.c:inode_init_owner…4.4
• CVE-2021-40373playSMS before 1.4.5 allows Arbitrary Code Execution by ente…9.8
• CVE-2021-40374A stored cross-site scripting (XSS) vulnerability was identi…5.4
• CVE-2021-40375Apperta Foundation OpenEyes 3.5.1 allows remote attackers to…6.5
• CVE-2021-40376otris Update Manager 1.2.1.0 allows local users to achieve S…7.8
• CVE-2021-40377SmarterTools SmarterMail 16.x before build 7866 has stored X…5.4
• CVE-2021-40378An issue was discovered on Compro IP70 2.08_7130218, IP570 2…8.1