Zohocorp Manageengine M365 Manager Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Zohocorp Manageengine M365 Manager Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-42099 — CVSS 9.8 (critical): Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.
• CVE-2023-35785 — CVSS 8.1 (high): Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer…
• CVE-2021-44650 — CVSS 7.2 (high): Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin…
• CVE-2023-6105 — CVSS 5.5 (medium): An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A…