# CVEs published 2021-07-17

5 CVEs were published on July 17, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-33911](https://cve.now/CVE-2021-33911.md): Zoho ManageEngine ADManager Plus before 7110 allows remote code execution. (no CVSS)
- [CVE-2021-36771](https://cve.now/CVE-2021-36771.md): Zoho ManageEngine ADManager Plus before 7110 allows reflected XSS. (no CVSS)
- [CVE-2021-36772](https://cve.now/CVE-2021-36772.md): Zoho ManageEngine ADManager Plus before 7110 allows stored XSS. (no CVSS)
- [CVE-2021-36213](https://cve.now/CVE-2021-36213.md): HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action can (no CVSS, github.com/hashicorp/consul)
- [CVE-2021-32574](https://cve.now/CVE-2021-32574.md): HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in (no CVSS, github.com/hashicorp/consul)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.