CVE-2021-44676: Zohocorp ManageEngine Access Manager Plus

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.

Affected products

• Zohocorp ManageEngine Access Manager Plus: version 4.1 only; version 4.2 only

Published 2021-12-20. Last modified 2026-06-17.