CVE-2021-42099: Zohocorp ManageEngine m365 Manager Plus

Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days.

Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.

Affected products

• Zohocorp ManageEngine m365 Manager Plus: affected versions not specified; version build_4000 only; version build_4001 only; version build_4002 only; version build_4003 only; version build_4004 only; …

Published 2021-11-30. Last modified 2026-06-17.