CVE-2020-29658

9.8 criticalEPSS 4.1%

Critical (9.8) in zohocorp manageengine applications control plus. EPSS 4.1% chance of exploitation in the next 30 days.

Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2021-03-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19