Manageengine Mobile Device Manager Plus

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6105 Nov 15, 21:15 MEDIUM POC This Month

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus Manageengine Admanager Plus +37

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-41339 Nov 12, 04:15 HIGH This Week

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Zoho Manageengine Mobile Device Manager Plus Zohocorp

NVD VulDB

CVSS 3.1

7.8

EPSS

0.5%

CVE-2019-12133 Jun 18, 22:15 HIGH This Week

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Zoho Manageengine Password Manager Pro Manageengine Servicedesk Plus Manageengine Supportcenter Plus +16

NVD GitHub

CVSS 3.0

7.8

EPSS

1.8%

CVE-2023-6105

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Information Disclosure Zoho Manageengine Access Manager Plus +39

NVD

CVE-2022-41339

EPSS 1% CVSS 7.8

HIGH This Week

Privilege Escalation Zoho Manageengine Mobile Device Manager Plus +1

NVD VulDB

CVE-2019-12133

EPSS 2% CVSS 7.8

HIGH This Week

Privilege Escalation Zoho Manageengine Password Manager Pro +18

NVD GitHub