Manageengine Endpoint Dlp Plus

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6105 Nov 15, 21:15 MEDIUM POC This Month

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Zoho Manageengine Analytics Plus Manageengine Appcreator Manageengine Application Control Plus +36

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-47966 Jan 18, 18:15 CRITICAL POC KEV PATCH THREAT Act Now

Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023.

RCE Zoho Apache Manageengine Access Manager Plus Manageengine Ad360 +20

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

94.4%

Threat

9.8

CVE-2023-6105

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Information Disclosure Zoho Manageengine Analytics Plus +38

NVD

CVE-2022-47966

EPSS 94% 9.8 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

RCE Zoho Apache +22

NVD GitHub VulDB