AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…
Priority MEDIUM 40CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.
Why it matters now
EPSS 0.02466 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* | b107 to before b115 | Vulnerable | Monitorapp |
| cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Monitorapp |
- cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* Versions b107 to before b115 Vulnerable ·Monitorapp
- cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Monitorapp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-36982
- 2026-10-03 Alias added: GHSA-3rv5-ggwr-m2p2
References
More Monitorapp Application Insight Manager vulnerabilities
- TI-2021-15001 AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)… CVSS 3.1HIGH 8.8
Sources
- CVE-2021-36982 · CVE Program
- CVE-2021-36982 · NVD
- FIRST EPSS
- GHSA-3rv5-ggwr-m2p2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences