CVE-2021-20131: Zohocorp ManageEngine Admanager Plus

High severity, CVSS 8.8. EPSS: 16.8% chance of exploitation in the next 30 days.

ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.

Affected products

• Zohocorp ManageEngine Admanager Plus: before 7.1 (fixed in 7.1); version 7.1 only

Published 2021-10-13. Last modified 2026-06-17.