CVE-2021-44650

Published: Jan 12, 2022Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.

Affected (18)

Products: Zohocorp: Manageengine M365 Manager Plus

Zohocorp

1 product

Manageengine M365 Manager Plus

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine M365 Manager Plus	Before 4.4
Zohocorp Manageengine M365 Manager Plus	Version 4.4
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4400
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4401
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4402
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4403
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4406
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4407
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4408
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4410
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4411
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4412
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4413
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4414
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4415
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4416
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4417
Zohocorp Manageengine M365 Manager Plus	Version 4.4 build4418

References (2)

https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419

Source: cve@mitre.org

Vendor Advisory

https://www.manageengine.com/microsoft-365-management-reporting/release-notes.html?Build=4419

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.