Manageengine Browser Security Plus

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-47966 Jan 18, 18:15 CRITICAL POC KEV PATCH THREAT Act Now

Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023.

RCE Apache Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus +21

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

94.4%

Threat

9.8

CVE-2023-6105 Nov 15, 21:15 MEDIUM POC This Month

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus Manageengine Admanager Plus +37

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2019-12133 Jun 18, 22:15 HIGH This Week

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Zoho Manageengine Password Manager Pro Manageengine Servicedesk Plus Manageengine Supportcenter Plus +16

NVD GitHub

CVSS 3.0

7.8

EPSS

1.8%

CVE-2022-47966

EPSS 94% 9.8 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

RCE Apache Zoho +23

NVD GitHub VulDB

CVE-2023-6105

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Information Disclosure Zoho Manageengine Access Manager Plus +39

NVD

CVE-2019-12133

EPSS 2% CVSS 7.8

HIGH This Week

Privilege Escalation Zoho Manageengine Password Manager Pro +18

NVD GitHub