Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
Priority MEDIUM 52CWE-434Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-434.
Summary
Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
Why it matters now
EPSS 0.06759 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4000:*:*:*:*:*:*:* | build_4000 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4001:*:*:*:*:*:*:* | build_4001 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4002:*:*:*:*:*:*:* | build_4002 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4003:*:*:*:*:*:*:* | build_4003 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4004:*:*:*:*:*:*:* | build_4004 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4005:*:*:*:*:*:*:* | build_4005 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4007:*:*:*:*:*:*:* | build_4007 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4008:*:*:*:*:*:*:* | build_4008 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4009:*:*:*:*:*:*:* | build_4009 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4000:*:*:*:*:*:*:* Versions build_4000 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4001:*:*:*:*:*:*:* Versions build_4001 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4002:*:*:*:*:*:*:* Versions build_4002 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4003:*:*:*:*:*:*:* Versions build_4003 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4004:*:*:*:*:*:*:* Versions build_4004 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4005:*:*:*:*:*:*:* Versions build_4005 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4007:*:*:*:*:*:*:* Versions build_4007 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4008:*:*:*:*:*:*:* Versions build_4008 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4009:*:*:*:*:*:*:* Versions build_4009 Vulnerable ·Zohocorp
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4010:*:*:*:*:*:*:* | build_4010 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4011:*:*:*:*:*:*:* | build_4011 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4012:*:*:*:*:*:*:* | build_4012 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4013:*:*:*:*:*:*:* | build_4013 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4014:*:*:*:*:*:*:* | build_4014 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4100:*:*:*:*:*:*:* | build_4100 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4101:*:*:*:*:*:*:* | build_4101 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4102:*:*:*:*:*:*:* | build_4102 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4103:*:*:*:*:*:*:* | build_4103 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4104:*:*:*:*:*:*:* | build_4104 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4105:*:*:*:*:*:*:* | build_4105 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4106:*:*:*:*:*:*:* | build_4106 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4108:*:*:*:*:*:*:* | build_4108 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4109:*:*:*:*:*:*:* | build_4109 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4110:*:*:*:*:*:*:* | build_4110 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4111:*:*:*:*:*:*:* | build_4111 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4112:*:*:*:*:*:*:* | build_4112 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4113:*:*:*:*:*:*:* | build_4113 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4115:*:*:*:*:*:*:* | build_4115 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4116:*:*:*:*:*:*:* | build_4116 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4117:*:*:*:*:*:*:* | build_4117 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4118:*:*:*:*:*:*:* | build_4118 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4119:*:*:*:*:*:*:* | build_4119 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4200:*:*:*:*:*:*:* | build_4200 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4201:*:*:*:*:*:*:* | build_4201 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4202:*:*:*:*:*:*:* | build_4202 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4203:*:*:*:*:*:*:* | build_4203 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4204:*:*:*:*:*:*:* | build_4204 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4205:*:*:*:*:*:*:* | build_4205 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4206:*:*:*:*:*:*:* | build_4206 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4207:*:*:*:*:*:*:* | build_4207 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4208:*:*:*:*:*:*:* | build_4208 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4209:*:*:*:*:*:*:* | build_4209 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4210:*:*:*:*:*:*:* | build_4210 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4211:*:*:*:*:*:*:* | build_4211 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4212:*:*:*:*:*:*:* | build_4212 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4213:*:*:*:*:*:*:* | build_4213 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4214:*:*:*:*:*:*:* | build_4214 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4215:*:*:*:*:*:*:* | build_4215 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4216:*:*:*:*:*:*:* | build_4216 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4217:*:*:*:*:*:*:* | build_4217 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4218:*:*:*:*:*:*:* | build_4218 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4219:*:*:*:*:*:*:* | build_4219 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4220:*:*:*:*:*:*:* | build_4220 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4221:*:*:*:*:*:*:* | build_4221 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4222:*:*:*:*:*:*:* | build_4222 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4300:*:*:*:*:*:*:* | build_4300 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4301:*:*:*:*:*:*:* | build_4301 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4302:*:*:*:*:*:*:* | build_4302 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4303:*:*:*:*:*:*:* | build_4303 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4304:*:*:*:*:*:*:* | build_4304 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4305:*:*:*:*:*:*:* | build_4305 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4306:*:*:*:*:*:*:* | build_4306 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4308:*:*:*:*:*:*:* | build_4308 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4309:*:*:*:*:*:*:* | build_4309 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4310:*:*:*:*:*:*:* | build_4310 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4311:*:*:*:*:*:*:* | build_4311 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4312:*:*:*:*:*:*:* | build_4312 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4316:*:*:*:*:*:*:* | build_4316 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4317:*:*:*:*:*:*:* | build_4317 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4318:*:*:*:*:*:*:* | build_4318 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4319:*:*:*:*:*:*:* | build_4319 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4320:*:*:*:*:*:*:* | build_4320 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4321:*:*:*:*:*:*:* | build_4321 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4322:*:*:*:*:*:*:* | build_4322 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4324:*:*:*:*:*:*:* | build_4324 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4325:*:*:*:*:*:*:* | build_4325 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4327:*:*:*:*:*:*:* | build_4327 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4328:*:*:*:*:*:*:* | build_4328 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4329:*:*:*:*:*:*:* | build_4329 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4330:*:*:*:*:*:*:* | build_4330 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4331:*:*:*:*:*:*:* | build_4331 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4332:*:*:*:*:*:*:* | build_4332 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4333:*:*:*:*:*:*:* | build_4333 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4334:*:*:*:*:*:*:* | build_4334 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4335:*:*:*:*:*:*:* | build_4335 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4336:*:*:*:*:*:*:* | build_4336 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4400:*:*:*:*:*:*:* | build_4400 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4401:*:*:*:*:*:*:* | build_4401 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4402:*:*:*:*:*:*:* | build_4402 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4403:*:*:*:*:*:*:* | build_4403 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4406:*:*:*:*:*:*:* | build_4406 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4407:*:*:*:*:*:*:* | build_4407 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4408:*:*:*:*:*:*:* | build_4408 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4410:*:*:*:*:*:*:* | build_4410 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4411:*:*:*:*:*:*:* | build_4411 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4412:*:*:*:*:*:*:* | build_4412 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4413:*:*:*:*:*:*:* | build_4413 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4414:*:*:*:*:*:*:* | build_4414 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4415:*:*:*:*:*:*:* | build_4415 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4416:*:*:*:*:*:*:* | build_4416 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4417:*:*:*:*:*:*:* | build_4417 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4418:*:*:*:*:*:*:* | build_4418 | Vulnerable | Zohocorp |
| cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4419:*:*:*:*:*:*:* | build_4419 | Vulnerable | Zohocorp |
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4010:*:*:*:*:*:*:* Versions build_4010 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4011:*:*:*:*:*:*:* Versions build_4011 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4012:*:*:*:*:*:*:* Versions build_4012 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4013:*:*:*:*:*:*:* Versions build_4013 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4014:*:*:*:*:*:*:* Versions build_4014 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4100:*:*:*:*:*:*:* Versions build_4100 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4101:*:*:*:*:*:*:* Versions build_4101 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4102:*:*:*:*:*:*:* Versions build_4102 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4103:*:*:*:*:*:*:* Versions build_4103 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4104:*:*:*:*:*:*:* Versions build_4104 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4105:*:*:*:*:*:*:* Versions build_4105 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4106:*:*:*:*:*:*:* Versions build_4106 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4108:*:*:*:*:*:*:* Versions build_4108 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4109:*:*:*:*:*:*:* Versions build_4109 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4110:*:*:*:*:*:*:* Versions build_4110 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4111:*:*:*:*:*:*:* Versions build_4111 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4112:*:*:*:*:*:*:* Versions build_4112 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4113:*:*:*:*:*:*:* Versions build_4113 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4115:*:*:*:*:*:*:* Versions build_4115 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4116:*:*:*:*:*:*:* Versions build_4116 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4117:*:*:*:*:*:*:* Versions build_4117 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4118:*:*:*:*:*:*:* Versions build_4118 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4119:*:*:*:*:*:*:* Versions build_4119 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4200:*:*:*:*:*:*:* Versions build_4200 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4201:*:*:*:*:*:*:* Versions build_4201 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4202:*:*:*:*:*:*:* Versions build_4202 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4203:*:*:*:*:*:*:* Versions build_4203 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4204:*:*:*:*:*:*:* Versions build_4204 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4205:*:*:*:*:*:*:* Versions build_4205 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4206:*:*:*:*:*:*:* Versions build_4206 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4207:*:*:*:*:*:*:* Versions build_4207 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4208:*:*:*:*:*:*:* Versions build_4208 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4209:*:*:*:*:*:*:* Versions build_4209 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4210:*:*:*:*:*:*:* Versions build_4210 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4211:*:*:*:*:*:*:* Versions build_4211 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4212:*:*:*:*:*:*:* Versions build_4212 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4213:*:*:*:*:*:*:* Versions build_4213 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4214:*:*:*:*:*:*:* Versions build_4214 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4215:*:*:*:*:*:*:* Versions build_4215 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4216:*:*:*:*:*:*:* Versions build_4216 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4217:*:*:*:*:*:*:* Versions build_4217 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4218:*:*:*:*:*:*:* Versions build_4218 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4219:*:*:*:*:*:*:* Versions build_4219 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4220:*:*:*:*:*:*:* Versions build_4220 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4221:*:*:*:*:*:*:* Versions build_4221 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4222:*:*:*:*:*:*:* Versions build_4222 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4300:*:*:*:*:*:*:* Versions build_4300 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4301:*:*:*:*:*:*:* Versions build_4301 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4302:*:*:*:*:*:*:* Versions build_4302 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4303:*:*:*:*:*:*:* Versions build_4303 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4304:*:*:*:*:*:*:* Versions build_4304 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4305:*:*:*:*:*:*:* Versions build_4305 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4306:*:*:*:*:*:*:* Versions build_4306 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4308:*:*:*:*:*:*:* Versions build_4308 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4309:*:*:*:*:*:*:* Versions build_4309 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4310:*:*:*:*:*:*:* Versions build_4310 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4311:*:*:*:*:*:*:* Versions build_4311 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4312:*:*:*:*:*:*:* Versions build_4312 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4316:*:*:*:*:*:*:* Versions build_4316 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4317:*:*:*:*:*:*:* Versions build_4317 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4318:*:*:*:*:*:*:* Versions build_4318 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4319:*:*:*:*:*:*:* Versions build_4319 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4320:*:*:*:*:*:*:* Versions build_4320 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4321:*:*:*:*:*:*:* Versions build_4321 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4322:*:*:*:*:*:*:* Versions build_4322 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4324:*:*:*:*:*:*:* Versions build_4324 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4325:*:*:*:*:*:*:* Versions build_4325 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4327:*:*:*:*:*:*:* Versions build_4327 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4328:*:*:*:*:*:*:* Versions build_4328 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4329:*:*:*:*:*:*:* Versions build_4329 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4330:*:*:*:*:*:*:* Versions build_4330 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4331:*:*:*:*:*:*:* Versions build_4331 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4332:*:*:*:*:*:*:* Versions build_4332 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4333:*:*:*:*:*:*:* Versions build_4333 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4334:*:*:*:*:*:*:* Versions build_4334 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4335:*:*:*:*:*:*:* Versions build_4335 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4336:*:*:*:*:*:*:* Versions build_4336 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4400:*:*:*:*:*:*:* Versions build_4400 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4401:*:*:*:*:*:*:* Versions build_4401 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4402:*:*:*:*:*:*:* Versions build_4402 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4403:*:*:*:*:*:*:* Versions build_4403 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4406:*:*:*:*:*:*:* Versions build_4406 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4407:*:*:*:*:*:*:* Versions build_4407 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4408:*:*:*:*:*:*:* Versions build_4408 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4410:*:*:*:*:*:*:* Versions build_4410 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4411:*:*:*:*:*:*:* Versions build_4411 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4412:*:*:*:*:*:*:* Versions build_4412 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4413:*:*:*:*:*:*:* Versions build_4413 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4414:*:*:*:*:*:*:* Versions build_4414 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4415:*:*:*:*:*:*:* Versions build_4415 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4416:*:*:*:*:*:*:* Versions build_4416 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4417:*:*:*:*:*:*:* Versions build_4417 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4418:*:*:*:*:*:*:* Versions build_4418 Vulnerable ·Zohocorp
- cpe:2.3:a:zohocorp:manageengine_m365_manager_plus:build_4419:*:*:*:*:*:*:* Versions build_4419 Vulnerable ·Zohocorp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-42099
- 2026-10-03 Alias added: GHSA-pf6c-6jfw-4cwc
References
More Zohocorp Manageengine M365 Manager Plus vulnerabilities
- TI-2023-17875 Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and… CVSS 3.1HIGH 8.1
- TI-2021-20187 Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution… CVSS 3.1HIGH 7.2
- TI-2023-05614 ManageEngine Information Disclosure in Multiple Products CVSS 3.1MEDIUM 5.5
Sources
- CVE-2021-42099 · CVE Program
- CVE-2021-42099 · NVD
- FIRST EPSS
- GHSA-pf6c-6jfw-4cwc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences