CVE-2021-44650: Zohocorp ManageEngine m365 Manager Plus

High severity, CVSS 7.2. EPSS: 4.8% chance of exploitation in the next 30 days.

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

Affected products

• Zohocorp ManageEngine m365 Manager Plus: before 4.4 (fixed in 4.4); version 4.4 only

Published 2022-01-12. Last modified 2026-06-17.