CVE-2021-44676

Published: Dec 20, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.

Affected (5)

Products: Zohocorp: Manageengine Access Manager Plus

Zohocorp

1 product

Manageengine Access Manager Plus

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Access Manager Plus	Version 4.1 build4100
Zohocorp Manageengine Access Manager Plus	Version 4.1 build4101
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4200
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4201
Zohocorp Manageengine Access Manager Plus	Version 4.2 build4202