Manageengine M365 Manager Plus (Zohocorp) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 152 known versions, newest CVE from 2026-08-11. Vendor: Zohocorp.

CVEs of Manageengine M365 Manager Plus

• CVE-2026-16053 - CVSS 8.5 (high), 2026-08-11: Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange…
• CVE-2026-11374 - CVSS 9 (critical), 2026-06-23: In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be…
• CVE-2023-6105 - CVSS 5.5 (medium), 2023-11-15: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user…
• CVE-2023-35785 - CVSS 8.1 (high), 2023-08-28: Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and…
• CVE-2021-44650 - CVSS 7.2 (high), 2022-01-12: Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant…
• CVE-2021-42099 - CVSS 9.8 (critical), 2021-11-30: Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.