CVE-2021-20130: Zohocorp ManageEngine Admanager Plus

High severity, CVSS 8.8. EPSS: 32.5% chance of exploitation in the next 30 days.

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.

Affected products

• Zohocorp ManageEngine Admanager Plus: before 7.1 (fixed in 7.1); version 7.1 only

Published 2021-10-13. Last modified 2026-06-17.