CVE-2021-28959: Zohocorp ManageEngine Eventlog Analyzer

Critical severity, CVSS 9.8. EPSS: 16.9% chance of exploitation in the next 30 days.

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution.

Affected products

• Zohocorp ManageEngine Eventlog Analyzer: before 12.1.4 (fixed in 12.1.4); version 12.1.4 only

Published 2021-04-30. Last modified 2026-06-17.