Manageengine Remote Monitoring And Management Central

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-47966 Jan 18, 18:15 CRITICAL POC KEV PATCH THREAT Act Now

Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023.

RCE Apache Zoho Manageengine Access Manager Plus Manageengine Adaudit Plus +21

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

94.4%

Threat

9.8

CVE-2024-5466 Aug 23, 14:15 HIGH This Week

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection Zoho Manageengine Opmanager Manageengine Opmanager Msp +3

NVD

CVSS 3.1

8.8

EPSS

7.0%

CVE-2022-47966

EPSS 94% 9.8 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

RCE Apache Zoho +23

NVD GitHub VulDB

CVE-2024-5466

EPSS 7% CVSS 8.8

HIGH This Week

RCE Code Injection Zoho +5

NVD