CVE-2021-42099: Malicious File Upload

Published Nov 30, 2021
·
Updated

Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.

Affected Software

104 affected components
ZohoCorp Manageengine M365 Manager Plus
ZohoCorp Manageengine M365 Manager Plus=build_4000
ZohoCorp Manageengine M365 Manager Plus=build_4001
ZohoCorp Manageengine M365 Manager Plus=build_4002
ZohoCorp Manageengine M365 Manager Plus=build_4003
ZohoCorp Manageengine M365 Manager Plus=build_4004
ZohoCorp Manageengine M365 Manager Plus=build_4005
ZohoCorp Manageengine M365 Manager Plus=build_4007
ZohoCorp Manageengine M365 Manager Plus=build_4008
ZohoCorp Manageengine M365 Manager Plus=build_4009
ZohoCorp Manageengine M365 Manager Plus=build_4010
ZohoCorp Manageengine M365 Manager Plus=build_4011
ZohoCorp Manageengine M365 Manager Plus=build_4012
ZohoCorp Manageengine M365 Manager Plus=build_4013
ZohoCorp Manageengine M365 Manager Plus=build_4014
ZohoCorp Manageengine M365 Manager Plus=build_4100
ZohoCorp Manageengine M365 Manager Plus=build_4101
ZohoCorp Manageengine M365 Manager Plus=build_4102
ZohoCorp Manageengine M365 Manager Plus=build_4103
ZohoCorp Manageengine M365 Manager Plus=build_4104
ZohoCorp Manageengine M365 Manager Plus=build_4105
ZohoCorp Manageengine M365 Manager Plus=build_4106
ZohoCorp Manageengine M365 Manager Plus=build_4108
ZohoCorp Manageengine M365 Manager Plus=build_4109
ZohoCorp Manageengine M365 Manager Plus=build_4110
ZohoCorp Manageengine M365 Manager Plus=build_4111
ZohoCorp Manageengine M365 Manager Plus=build_4112
ZohoCorp Manageengine M365 Manager Plus=build_4113
ZohoCorp Manageengine M365 Manager Plus=build_4115
ZohoCorp Manageengine M365 Manager Plus=build_4116
ZohoCorp Manageengine M365 Manager Plus=build_4117
ZohoCorp Manageengine M365 Manager Plus=build_4118
ZohoCorp Manageengine M365 Manager Plus=build_4119
ZohoCorp Manageengine M365 Manager Plus=build_4200
ZohoCorp Manageengine M365 Manager Plus=build_4201
ZohoCorp Manageengine M365 Manager Plus=build_4202
ZohoCorp Manageengine M365 Manager Plus=build_4203
ZohoCorp Manageengine M365 Manager Plus=build_4204
ZohoCorp Manageengine M365 Manager Plus=build_4205
ZohoCorp Manageengine M365 Manager Plus=build_4206
ZohoCorp Manageengine M365 Manager Plus=build_4207
ZohoCorp Manageengine M365 Manager Plus=build_4208
ZohoCorp Manageengine M365 Manager Plus=build_4209
ZohoCorp Manageengine M365 Manager Plus=build_4210
ZohoCorp Manageengine M365 Manager Plus=build_4211
ZohoCorp Manageengine M365 Manager Plus=build_4212
ZohoCorp Manageengine M365 Manager Plus=build_4213
ZohoCorp Manageengine M365 Manager Plus=build_4214
ZohoCorp Manageengine M365 Manager Plus=build_4215
ZohoCorp Manageengine M365 Manager Plus=build_4216
ZohoCorp Manageengine M365 Manager Plus=build_4217
ZohoCorp Manageengine M365 Manager Plus=build_4218
ZohoCorp Manageengine M365 Manager Plus=build_4219
ZohoCorp Manageengine M365 Manager Plus=build_4220
ZohoCorp Manageengine M365 Manager Plus=build_4221
ZohoCorp Manageengine M365 Manager Plus=build_4222
ZohoCorp Manageengine M365 Manager Plus=build_4300
ZohoCorp Manageengine M365 Manager Plus=build_4301
ZohoCorp Manageengine M365 Manager Plus=build_4302
ZohoCorp Manageengine M365 Manager Plus=build_4303
ZohoCorp Manageengine M365 Manager Plus=build_4304
ZohoCorp Manageengine M365 Manager Plus=build_4305
ZohoCorp Manageengine M365 Manager Plus=build_4306
ZohoCorp Manageengine M365 Manager Plus=build_4308
ZohoCorp Manageengine M365 Manager Plus=build_4309
ZohoCorp Manageengine M365 Manager Plus=build_4310
ZohoCorp Manageengine M365 Manager Plus=build_4311
ZohoCorp Manageengine M365 Manager Plus=build_4312
ZohoCorp Manageengine M365 Manager Plus=build_4316
ZohoCorp Manageengine M365 Manager Plus=build_4317
ZohoCorp Manageengine M365 Manager Plus=build_4318
ZohoCorp Manageengine M365 Manager Plus=build_4319
ZohoCorp Manageengine M365 Manager Plus=build_4320
ZohoCorp Manageengine M365 Manager Plus=build_4321
ZohoCorp Manageengine M365 Manager Plus=build_4322
ZohoCorp Manageengine M365 Manager Plus=build_4324
ZohoCorp Manageengine M365 Manager Plus=build_4325
ZohoCorp Manageengine M365 Manager Plus=build_4327
ZohoCorp Manageengine M365 Manager Plus=build_4328
ZohoCorp Manageengine M365 Manager Plus=build_4329
ZohoCorp Manageengine M365 Manager Plus=build_4330
ZohoCorp Manageengine M365 Manager Plus=build_4331
ZohoCorp Manageengine M365 Manager Plus=build_4332
ZohoCorp Manageengine M365 Manager Plus=build_4333
ZohoCorp Manageengine M365 Manager Plus=build_4334
ZohoCorp Manageengine M365 Manager Plus=build_4335
ZohoCorp Manageengine M365 Manager Plus=build_4336
ZohoCorp Manageengine M365 Manager Plus=build_4400
ZohoCorp Manageengine M365 Manager Plus=build_4401
ZohoCorp Manageengine M365 Manager Plus=build_4402
ZohoCorp Manageengine M365 Manager Plus=build_4403
ZohoCorp Manageengine M365 Manager Plus=build_4406
ZohoCorp Manageengine M365 Manager Plus=build_4407
ZohoCorp Manageengine M365 Manager Plus=build_4408
ZohoCorp Manageengine M365 Manager Plus=build_4410
ZohoCorp Manageengine M365 Manager Plus=build_4411
ZohoCorp Manageengine M365 Manager Plus=build_4412
ZohoCorp Manageengine M365 Manager Plus=build_4413
ZohoCorp Manageengine M365 Manager Plus=build_4414
ZohoCorp Manageengine M365 Manager Plus=build_4415
ZohoCorp Manageengine M365 Manager Plus=build_4416
ZohoCorp Manageengine M365 Manager Plus=build_4417
ZohoCorp Manageengine M365 Manager Plus=build_4418
ZohoCorp Manageengine M365 Manager Plus=build_4419

Event History

Nov 30, 2021
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2021-42099?

CVE-2021-42099 is classified as a high severity vulnerability due to its potential for remote code execution.

2

How do I fix CVE-2021-42099?

To mitigate CVE-2021-42099, upgrade to ManageEngine M365 Manager Plus version 4421 or later.

3

What type of vulnerability is CVE-2021-42099?

CVE-2021-42099 is a file-upload vulnerability that allows for remote code execution.

4

Which versions of ManageEngine M365 Manager Plus are affected by CVE-2021-42099?

CVE-2021-42099 affects ManageEngine M365 Manager Plus versions prior to 4421.

5

What are the potential consequences of exploiting CVE-2021-42099?

Exploitation of CVE-2021-42099 could allow an attacker to execute arbitrary code on the affected system.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203