Manageengine Vulnerability Manager Plus

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-6105 MEDIUM POC This Month

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Zoho Manageengine Analytics Plus Manageengine Appcreator Manageengine Application Control Plus +36

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2019-12133 HIGH This Week

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Zoho Manageengine Analytics Plus Manageengine Browser Security Plus Manageengine Desktop Central +15

NVD GitHub

CVSS 3.0

7.8

EPSS

1.8%

CVE-2023-6105

EPSS 1% CVSS 5.5

MEDIUM POC This Month

Information Disclosure Zoho Manageengine Analytics Plus +38

NVD

CVE-2019-12133

EPSS 2% CVSS 7.8

HIGH This Week

Privilege Escalation Zoho Manageengine Analytics Plus +17

NVD GitHub