CVE-2021-31813: Zohocorp ManageEngine Applications Manager

Medium severity, CVSS 5.4. EPSS: 78.3% chance of exploitation in the next 30 days.

Zoho ManageEngine Applications Manager before 15130 is vulnerable to Stored XSS while importing malicious user details (e.g., a crafted user name) from AD.

Affected products

• Zohocorp ManageEngine Applications Manager: before 15.1 (fixed in 15.1); version 15.1 only

Published 2021-07-01. Last modified 2026-06-17.