Vendor/product archive

zohocorp / manageengine_patch_manager_plus CVEs

Beta · best-effort

3 CVEs tagged to zohocorp / manageengine_patch_manager_plus — 1 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to zohocorp vendor archive

CVE-2023-6105

Published Nov 15, 2023

An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-47966

Published Jan 18, 2023

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Jav…

CVSS 9.8 · Critical

evidence mentions: 40
Buzz score: 80.7

KEV listedPublic PoC observed

Vendor/product tagsBeta · best-effort

CVE-2019-12133

Published Jun 18, 2019

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover,…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1