Vendor/product archive

zohocorp / manageengine_device_control_plus CVEs

Beta · best-effort

4 CVEs tagged to zohocorp / manageengine_device_control_plus — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zohocorp vendor archive

CVE-2023-6105

Published Nov 15, 2023

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-47966

Published Jan 18, 2023

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Jav…

CVSS 9.8 · Critical

evidence mentions: 40
Buzz score: 80.7

KEV listedPublic PoC observed

Vendor/product tagsBeta · best-effort

CVE-2022-47578

Published Dec 20, 2022

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2022-47577

Published Dec 20, 2022

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1