ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO, USA, designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks such as bulk management of user accounts and AD objects, assigning role-based access to help desk technicians, etc. A security vulnerability exists in versions of ZOHO ManageEngine ADManager Plus prior to 7.1. An authenticated attacker can use this vulnerability to execute commands in agent settings.