CVE-2021-44651

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-12 · updated 2026-06-17
Weakness: CWE-434

Description

Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.

Affected products

Zohocorp Log360: through 5.2.2
Zohocorp Manageengine Cloud Security Plus: before 4.1; through 4.1.1.7; 4.1, 4.1-build4110, 4.1-build4111, 4.1-build4112, 4.1-build4113, 4.1-build4115 (+1) — fixed in 4.1

How to fix

Upgrade to a fixed version: Zohocorp Manageengine Cloud Security Plus 4.1. Check the vendor advisory for mitigations.

References

https://sahildhar.github.io/blogpost/Zoho-ManageEngine-CloudSecurityPlus-Remote-Code-Execution-via-Security-Misconfiguration/
https://sahildhar.github.io/blogpost/Zoho-ManageEngine-CloudSecurityPlus-Remote-Code-Execution-via-Security-Misconfiguration/

Get alerted when CVE-2021-44651 or the next vulnerability affects your stack