474
CVEs
128
Critical
162
High
7
KEV
166
PoC
251
Unpatched C/H
14.6%
Patch Rate
15.7%
Avg EPSS
Severity Breakdown
CRITICAL
128
HIGH
162
MEDIUM
177
LOW
7
Monthly CVE Trend
Affected Products (30)
Zoho
443
Manageengine Opmanager
50
Manageengine Admanager Plus
47
Manageengine Adselfservice Plus
46
Manageengine Servicedesk Plus
45
Manageengine Adaudit Plus
45
Manageengine Applications Manager
38
Manageengine Desktop Central
34
Manageengine Supportcenter Plus
31
Manageengine Netflow Analyzer
28
Manageengine Assetexplorer
25
Manageengine Exchange Reporter Plus
25
Manageengine Servicedesk Plus Msp
25
Manageengine Password Manager Pro
22
Manageengine Eventlog Analyzer
17
Manageengine Pam360
16
Manageengine Network Configuration Manager
14
Manageengine Firewall Analyzer
12
Manageengine Remote Access Plus
11
Manageengine Access Manager Plus
10
Manageengine Log360
10
Manageengine Endpoint Central
10
Manageengine Oputils
8
Manageengine It360
8
Manageengine Datasecurity Plus
7
Manageengine Key Manager Plus
5
Servicedesk Plus
5
Manageengine Opmanager Msp
5
Manageengine Sharepoint Manager Plus
5
Manageengine Social It Plus
5
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2022-47966 | Multiple Zoho ManageEngine on-premise products allow unauthenticated remote code execution through SAML SSO functionality due to use of a vulnerable Apache XML Security library, massively exploited in January 2023. | CRITICAL | 9.8 | 94.4% | 238 |
KEV
PoC
|
| CVE-2016-6600 | Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 90.6%. | CRITICAL | 9.8 | 90.6% | 175 |
PoC
No patch
|
| CVE-2014-5005 | Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 85.8%. | HIGH | 7.5 | 85.8% | 158 |
PoC
No patch
|
| CVE-2015-7765 | ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain administrator access. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.7%. | CRITICAL | 9.0 | 77.7% | 158 |
PoC
No patch
|
| CVE-2015-7766 | PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.5%. | CRITICAL | 9.0 | 77.5% | 158 |
PoC
No patch
|
| CVE-2014-6037 | Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.7%. | HIGH | 7.5 | 81.7% | 154 |
PoC
No patch
|
| CVE-2015-7387 | ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.7%. | HIGH | 7.5 | 81.7% | 154 |
PoC
No patch
|
| CVE-2016-6601 | Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 92.8%. | HIGH | 7.5 | 92.8% | 150 |
PoC
No patch
|
| CVE-2023-47211 | A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.6%. | CRITICAL | 9.1 | 81.6% | 147 |
PoC
No patch
|
| CVE-2014-6034 | Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 86.6%. | MEDIUM | 5.0 | 86.6% | 147 |
PoC
|
| CVE-2014-7866 | Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 82.8%. | HIGH | 7.5 | 82.8% | 140 |
PoC
No patch
|
| CVE-2016-6603 | ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 70.3%. | CRITICAL | 9.8 | 70.3% | 139 |
PoC
No patch
|
| CVE-2014-5445 | Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 91.0%. | MEDIUM | 5.0 | 91.0% | 136 |
PoC
No patch
|
| CVE-2014-7868 | Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 69.7%. | HIGH | 7.5 | 69.7% | 127 |
PoC
No patch
|
| CVE-2014-100002 | Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 78.9%. | MEDIUM | 5.0 | 78.9% | 124 |
PoC
No patch
|