Manageengine Os Deployer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6105 Nov 15, 21:15 MEDIUM POC This Month

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus Manageengine Admanager Plus +37

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-47966 Jan 18, 18:15 CRITICAL POC KEV PATCH THREAT Act Now

Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023.

RCE Apache Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus +21

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

94.4%

Threat

9.8

CVE-2023-6105

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Information Disclosure Zoho Manageengine Access Manager Plus +39

NVD

CVE-2022-47966

EPSS 94% 9.8 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

RCE Apache Zoho +23

NVD GitHub VulDB