CVE-2021-44652

HIGH

Zoho ManageEngine O365 Manager Plus < Build 4416 - Remote Code Execution via BCP File Overwrite in ChangeDBAPI

Title source: llm
STIX 2.1

Description

Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0111
EPSS Percentile 78.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (2)
zohocorp/manageengine_o365_manager_plus 4.4 (14 CPE variants)
zohocorp/manageengine_o365_manager_plus < 4.4
Published Jan 12, 2022
Tracked Since Feb 18, 2026