Read the docs
TI-2022-23765 Aliases CVE-2022-47966GHSA-mqq7-v29v-25f6

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003…

Priority CRITICAL 100Exploited in the wildCWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).

Why it matters now

Exploitation Active In CISA KEV since 2023-01-23CISA due date 2023-02-13Known ransomware use
EPSS 0.99753 99th percentileScored 2026-11-07
Public exploit Yes 6 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 156

CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:*before 4.3VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4300:*:*:*:*:*:*4.3 build4300VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4301:*:*:*:*:*:*4.3 build4301VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4302:*:*:*:*:*:*4.3 build4302VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4303:*:*:*:*:*:*4.3 build4303VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4304:*:*:*:*:*:*4.3 build4304VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4305:*:*:*:*:*:*4.3 build4305VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4306:*:*:*:*:*:*4.3 build4306VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4307:*:*:*:*:*:*4.3 build4307VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:*before 4.3VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4300:*:*:*:*:*:* Versions 4.3 build4300 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4301:*:*:*:*:*:* Versions 4.3 build4301 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4302:*:*:*:*:*:* Versions 4.3 build4302 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4303:*:*:*:*:*:* Versions 4.3 build4303 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4304:*:*:*:*:*:* Versions 4.3 build4304 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4305:*:*:*:*:*:* Versions 4.3 build4305 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4306:*:*:*:*:*:* Versions 4.3 build4306 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_access_manager_plus:4.3:build4307:*:*:*:*:*:* Versions 4.3 build4307 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:*:*:*:*:*:*:*:* Versions before 4.3 Vulnerable ·Zohocorp
Show 146 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4300:*:*:*:*:*:*4.3 4300VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4302:*:*:*:*:*:*4.3 4302VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4303:*:*:*:*:*:*4.3 4303VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4304:*:*:*:*:*:*4.3 4304VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4305:*:*:*:*:*:*4.3 4305VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4306:*:*:*:*:*:*4.3 4306VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4308:*:*:*:*:*:*4.3 4308VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4309:*:*:*:*:*:*4.3 4309VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:*before 7.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:*7.0 7000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:*7.0 7002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:*7.0 7003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:*7.0 7004VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:*7.0 7005VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:*7.0 7006VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:*7.0 7007VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:*7.0 7008VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:*7.0 7050VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:*7.0 7051VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:*7.0 7052VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:*7.0 7053VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:*7.0 7054VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:*7.0 7055VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:*7.0 7060VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:*7.0 7062VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:*7.0 7063VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:*7.0 7065VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:*7.0 7080VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:*before 7.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:*7.1 7100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:*7.1 7101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:*7.1 7102VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:*7.1 7110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:*7.1 7111VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:*7.1 7112VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:*7.1 7113VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:*7.1 7114VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:*7.1 7115VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:*7.1 7116VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:*7.1 7117VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:*7.1 7118VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:*7.1 7120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:*7.1 7121VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:*7.1 7122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:*7.1 7123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:*7.1 7124VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:*7.1 7125VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:*7.1 7126VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:*7.1 7130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:*7.1 7131VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:*7.1 7140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:*7.1 7141VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:*7.1 7150VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:*7.1 7151VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:*7.1 7160VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:*7.1 7161VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:*before 6.2VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6200:*:*:*:*:*:*6.2 6200VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6201:*:*:*:*:*:*6.2 6201VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6202:*:*:*:*:*:*6.2 6202VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6203:*:*:*:*:*:*6.2 6203VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6204:*:*:*:*:*:*6.2 6204VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6205:*:*:*:*:*:*6.2 6205VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6206:*:*:*:*:*:*6.2 6206VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6207:*:*:*:*:*:*6.2 6207VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6208:*:*:*:*:*:*6.2 6208VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6209:*:*:*:*:*:*6.2 6209VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6210:*:*:*:*:*:*6.2 6210VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:*:*:*:*:*:*:*:*before 5.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5100:*:*:*:*:*:*5.1 5100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5110:*:*:*:*:*:*5.1 5110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5120:*:*:*:*:*:*5.1 5120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5121:*:*:*:*:*:*5.1 5121VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5130:*:*:*:*:*:*5.1 5130VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5140:*:*:*:*:*:*5.1 5140VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:*before 6.9VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:*6.9 6900VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:*6.9 6901VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:*6.9 6902VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:*6.9 6903VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:*6.9 6904VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:*6.9 6905VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:*6.9 6906VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:*6.9 6907VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:*6.9 6908VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:*6.9 6909VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:*6.9 6950VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:*6.9 6951VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:*6.9 6952VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:*6.9 6953VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:*6.9 6954VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:*6.9 6955VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:*6.9 6956VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:*6.9 6957VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:*6.9 6970VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:*6.9 6971VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:*6.9 6972VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:*6.9 6973VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:*6.9 6974VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:*6.9 6975VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:*6.9 6976VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:*6.9 6977VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:*6.9 6978VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:*6.9 6979VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:*6.9 6980VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:*6.9 6981VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:*6.9 6982VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_key_manager_plus:*:*:*:*:*:*:*:*before 6.4VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_key_manager_plus:6.4:6400:*:*:*:*:*:*6.4 6400VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:*before 5.7VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5700:*:*:*:*:*:*5.7 build5700VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5710:*:*:*:*:*:*5.7 build5710VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5711:*:*:*:*:*:*5.7 build5711VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5712:*:*:*:*:*:*5.7 build5712VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:*before 12.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12100:*:*:*:*:*:*12.1 build12100VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12101:*:*:*:*:*:*12.1 build12101VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12110:*:*:*:*:*:*12.1 build12110VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12120:*:*:*:*:*:*12.1 build12120VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12121:*:*:*:*:*:*12.1 build12121VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12122:*:*:*:*:*:*12.1 build12122VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12123:*:*:*:*:*:*12.1 build12123VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:*before 14.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:*14.0 14000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:*14.0 14001VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:*14.0 14002VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:*14.0 14003VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:*before 13.0VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:*13.0 13000VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:*11.0 11017VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:*11.0 11018VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:*11.0 11019VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:*11.0 11020VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:*11.0 11021VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:*11.0 11022VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:*11.0 11024VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:*11.0 11025VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_application_control_plus:*:*:*:*:*:*:*:*before 10.1.2220.18VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_browser_security_plus:*:*:*:*:*:*:*:*before 11.1.2238.6VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_device_control_plus:*:*:*:*:*:*:*:*before 10.1.2220.18VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_endpoint_dlp_plus:*:*:*:*:*:*:*:*before 10.1.2137.6VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_os_deployer:*:*:*:*:*:*:*:*before 1.1.2243.1VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_patch_manager_plus:*:*:*:*:*:*:*:*before 10.1.2220.18VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_remote_access_plus:*:*:*:*:*:*:*:*before 10.1.2228.11VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_remote_monitoring_and_management_central:*:*:*:*:*:*:*:*before 10.1.41VulnerableZohocorp
cpe:2.3:a:zohocorp:manageengine_vulnerability_manager_plus:*:*:*:*:*:*:*:*before 10.1.2220.18VulnerableZohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4300:*:*:*:*:*:* Versions 4.3 4300 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4302:*:*:*:*:*:* Versions 4.3 4302 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4303:*:*:*:*:*:* Versions 4.3 4303 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4304:*:*:*:*:*:* Versions 4.3 4304 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4305:*:*:*:*:*:* Versions 4.3 4305 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4306:*:*:*:*:*:* Versions 4.3 4306 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4308:*:*:*:*:*:* Versions 4.3 4308 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_ad360:4.3:4309:*:*:*:*:*:* Versions 4.3 4309 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:*:*:*:*:*:*:*:* Versions before 7.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7000:*:*:*:*:*:* Versions 7.0 7000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7002:*:*:*:*:*:* Versions 7.0 7002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7003:*:*:*:*:*:* Versions 7.0 7003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7004:*:*:*:*:*:* Versions 7.0 7004 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7005:*:*:*:*:*:* Versions 7.0 7005 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7006:*:*:*:*:*:* Versions 7.0 7006 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7007:*:*:*:*:*:* Versions 7.0 7007 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7008:*:*:*:*:*:* Versions 7.0 7008 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7050:*:*:*:*:*:* Versions 7.0 7050 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7051:*:*:*:*:*:* Versions 7.0 7051 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7052:*:*:*:*:*:* Versions 7.0 7052 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7053:*:*:*:*:*:* Versions 7.0 7053 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7054:*:*:*:*:*:* Versions 7.0 7054 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7055:*:*:*:*:*:* Versions 7.0 7055 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7060:*:*:*:*:*:* Versions 7.0 7060 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7062:*:*:*:*:*:* Versions 7.0 7062 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7063:*:*:*:*:*:* Versions 7.0 7063 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7065:*:*:*:*:*:* Versions 7.0 7065 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adaudit_plus:7.0:7080:*:*:*:*:*:* Versions 7.0 7080 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:*:*:*:*:*:*:*:* Versions before 7.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7100:*:*:*:*:*:* Versions 7.1 7100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7101:*:*:*:*:*:* Versions 7.1 7101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7102:*:*:*:*:*:* Versions 7.1 7102 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7110:*:*:*:*:*:* Versions 7.1 7110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7111:*:*:*:*:*:* Versions 7.1 7111 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7112:*:*:*:*:*:* Versions 7.1 7112 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7113:*:*:*:*:*:* Versions 7.1 7113 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7114:*:*:*:*:*:* Versions 7.1 7114 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7115:*:*:*:*:*:* Versions 7.1 7115 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7116:*:*:*:*:*:* Versions 7.1 7116 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7117:*:*:*:*:*:* Versions 7.1 7117 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7118:*:*:*:*:*:* Versions 7.1 7118 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7120:*:*:*:*:*:* Versions 7.1 7120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7121:*:*:*:*:*:* Versions 7.1 7121 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7122:*:*:*:*:*:* Versions 7.1 7122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7123:*:*:*:*:*:* Versions 7.1 7123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7124:*:*:*:*:*:* Versions 7.1 7124 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7125:*:*:*:*:*:* Versions 7.1 7125 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7126:*:*:*:*:*:* Versions 7.1 7126 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7130:*:*:*:*:*:* Versions 7.1 7130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7131:*:*:*:*:*:* Versions 7.1 7131 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7140:*:*:*:*:*:* Versions 7.1 7140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7141:*:*:*:*:*:* Versions 7.1 7141 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7150:*:*:*:*:*:* Versions 7.1 7150 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7151:*:*:*:*:*:* Versions 7.1 7151 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7160:*:*:*:*:*:* Versions 7.1 7160 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_admanager_plus:7.1:7161:*:*:*:*:*:* Versions 7.1 7161 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:*:*:*:*:*:*:*:* Versions before 6.2 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6200:*:*:*:*:*:* Versions 6.2 6200 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6201:*:*:*:*:*:* Versions 6.2 6201 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6202:*:*:*:*:*:* Versions 6.2 6202 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6203:*:*:*:*:*:* Versions 6.2 6203 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6204:*:*:*:*:*:* Versions 6.2 6204 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6205:*:*:*:*:*:* Versions 6.2 6205 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6206:*:*:*:*:*:* Versions 6.2 6206 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6207:*:*:*:*:*:* Versions 6.2 6207 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6208:*:*:*:*:*:* Versions 6.2 6208 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6209:*:*:*:*:*:* Versions 6.2 6209 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.2:6210:*:*:*:*:*:* Versions 6.2 6210 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:*:*:*:*:*:*:*:* Versions before 5.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5100:*:*:*:*:*:* Versions 5.1 5100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5110:*:*:*:*:*:* Versions 5.1 5110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5120:*:*:*:*:*:* Versions 5.1 5120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5121:*:*:*:*:*:* Versions 5.1 5121 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5130:*:*:*:*:*:* Versions 5.1 5130 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_analytics_plus:5.1:5140:*:*:*:*:*:* Versions 5.1 5140 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:*:*:*:*:*:*:*:* Versions before 6.9 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6900:*:*:*:*:*:* Versions 6.9 6900 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6901:*:*:*:*:*:* Versions 6.9 6901 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6902:*:*:*:*:*:* Versions 6.9 6902 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6903:*:*:*:*:*:* Versions 6.9 6903 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6904:*:*:*:*:*:* Versions 6.9 6904 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6905:*:*:*:*:*:* Versions 6.9 6905 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6906:*:*:*:*:*:* Versions 6.9 6906 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6907:*:*:*:*:*:* Versions 6.9 6907 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6908:*:*:*:*:*:* Versions 6.9 6908 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6909:*:*:*:*:*:* Versions 6.9 6909 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6950:*:*:*:*:*:* Versions 6.9 6950 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6951:*:*:*:*:*:* Versions 6.9 6951 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6952:*:*:*:*:*:* Versions 6.9 6952 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6953:*:*:*:*:*:* Versions 6.9 6953 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6954:*:*:*:*:*:* Versions 6.9 6954 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6955:*:*:*:*:*:* Versions 6.9 6955 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6956:*:*:*:*:*:* Versions 6.9 6956 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6957:*:*:*:*:*:* Versions 6.9 6957 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6970:*:*:*:*:*:* Versions 6.9 6970 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6971:*:*:*:*:*:* Versions 6.9 6971 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6972:*:*:*:*:*:* Versions 6.9 6972 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6973:*:*:*:*:*:* Versions 6.9 6973 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6974:*:*:*:*:*:* Versions 6.9 6974 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6975:*:*:*:*:*:* Versions 6.9 6975 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6976:*:*:*:*:*:* Versions 6.9 6976 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6977:*:*:*:*:*:* Versions 6.9 6977 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6978:*:*:*:*:*:* Versions 6.9 6978 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6979:*:*:*:*:*:* Versions 6.9 6979 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6980:*:*:*:*:*:* Versions 6.9 6980 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6981:*:*:*:*:*:* Versions 6.9 6981 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.9:6982:*:*:*:*:*:* Versions 6.9 6982 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_key_manager_plus:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_key_manager_plus:6.4:6400:*:*:*:*:*:* Versions 6.4 6400 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_pam360:*:*:*:*:*:*:*:* Versions before 5.7 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5700:*:*:*:*:*:* Versions 5.7 build5700 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5710:*:*:*:*:*:* Versions 5.7 build5710 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5711:*:*:*:*:*:* Versions 5.7 build5711 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_pam360:5.7:build5712:*:*:*:*:*:* Versions 5.7 build5712 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:*:*:*:*:*:*:*:* Versions before 12.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12100:*:*:*:*:*:* Versions 12.1 build12100 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12101:*:*:*:*:*:* Versions 12.1 build12101 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12110:*:*:*:*:*:* Versions 12.1 build12110 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12120:*:*:*:*:*:* Versions 12.1 build12120 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12121:*:*:*:*:*:* Versions 12.1 build12121 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12122:*:*:*:*:*:* Versions 12.1 build12122 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_password_manager_pro:12.1:build12123:*:*:*:*:*:* Versions 12.1 build12123 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:*:*:*:*:*:*:*:* Versions before 14.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14000:*:*:*:*:*:* Versions 14.0 14000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14001:*:*:*:*:*:* Versions 14.0 14001 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14002:*:*:*:*:*:* Versions 14.0 14002 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:14.0:14003:*:*:*:*:*:* Versions 14.0 14003 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:*:*:*:*:*:*:*:* Versions before 13.0 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_servicedesk_plus_msp:13.0:13000:*:*:*:*:*:* Versions 13.0 13000 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11017:*:*:*:*:*:* Versions 11.0 11017 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11018:*:*:*:*:*:* Versions 11.0 11018 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11019:*:*:*:*:*:* Versions 11.0 11019 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11020:*:*:*:*:*:* Versions 11.0 11020 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11021:*:*:*:*:*:* Versions 11.0 11021 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11022:*:*:*:*:*:* Versions 11.0 11022 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11024:*:*:*:*:*:* Versions 11.0 11024 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_supportcenter_plus:11.0:11025:*:*:*:*:*:* Versions 11.0 11025 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_application_control_plus:*:*:*:*:*:*:*:* Versions before 10.1.2220.18 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_browser_security_plus:*:*:*:*:*:*:*:* Versions before 11.1.2238.6 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_device_control_plus:*:*:*:*:*:*:*:* Versions before 10.1.2220.18 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_endpoint_dlp_plus:*:*:*:*:*:*:*:* Versions before 10.1.2137.6 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_os_deployer:*:*:*:*:*:*:*:* Versions before 1.1.2243.1 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_patch_manager_plus:*:*:*:*:*:*:*:* Versions before 10.1.2220.18 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_remote_access_plus:*:*:*:*:*:*:*:* Versions before 10.1.2228.11 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_remote_monitoring_and_management_central:*:*:*:*:*:*:*:* Versions before 10.1.41 Vulnerable ·Zohocorp
  • cpe:2.3:a:zohocorp:manageengine_vulnerability_manager_plus:*:*:*:*:*:*:*:* Versions before 10.1.2220.18 Vulnerable ·Zohocorp

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 14 products
  • Logging Subsystem for Red Hat OpenShift
  • Red Hat Data Grid 8
  • Red Hat Fuse 7
  • Red Hat Integration Camel K 1
  • Red Hat Integration Camel Quarkus 1
  • Red Hat JBoss Data Grid 7
  • Red Hat JBoss Data Virtualization 6
  • Red Hat JBoss Enterprise Application Platform 6
  • Red Hat JBoss Enterprise Application Platform 7
  • Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat JBoss Fuse 6
  • Red Hat JBoss Fuse Service Works 6
  • Red Hat Single Sign-On 7
  • Red Hat build of Apache Camel for Spring Boot 3

Timeline

  1. 2023-01-23 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2022-47966
  3. 2026-10-03 Alias added: GHSA-mqq7-v29v-25f6

References

Exploit 6

Patch 1

Advisory 2

Other 1

  • TI-2022-15981 Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-20117 Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19808 Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-17574 Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API… KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-15358 Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-08210 Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of… KEVCVSS 3.1CRITICAL 9.8
See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences