Vulnerabilities > CVE-2021-44650 - Unspecified vulnerability in Zohocorp Manageengine M365 Manager Plus 4.4

047910
CVSS 7.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
zohocorp

Summary

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

Vulnerable Configurations

Part Description Count
Application
Zohocorp
18