Manageengine Remote Monitoring And Management Central

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-5466 Aug 23, 14:15 HIGH This Week

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the authenticated remote code execution in the deploy agent option. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection RCE Zoho Manageengine Opmanager Manageengine Opmanager Msp +2

NVD

CVSS 3.1

8.8

EPSS

7.0%

CVE-2022-47966 Jan 18, 18:15 CRITICAL POC KEV PATCH THREAT Act Now

Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023.

RCE Zoho Apache Manageengine Access Manager Plus Manageengine Ad360 +20

NVD GitHub VulDB

CVSS 3.1

9.8

EPSS

94.4%

Threat

9.8

CVE-2024-5466

EPSS 7% CVSS 8.8

HIGH This Week

Code Injection RCE Zoho +4

NVD

CVE-2022-47966

EPSS 94% 9.8 CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

RCE Zoho Apache +22

NVD GitHub VulDB